https://github.com/polymorf/findcrypt-yara

IDA pro plugin to find crypto constants (and more)
https://github.com/polymorf/findcrypt-yara

Last synced: 20 days ago
JSON representation

IDA pro plugin to find crypto constants (and more)

• Host: GitHub
• URL: https://github.com/polymorf/findcrypt-yara
• Owner: polymorf
• License: bsd-3-clause
• Created: 2017-03-20T16:02:35.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2024-05-07T03:02:12.000Z (6 months ago)
• Last Synced: 2024-10-01T15:41:25.916Z (about 1 month ago)
• Language: Python
• Size: 302 KB
• Stars: 1,322
• Watchers: 48
• Forks: 232
• Open Issues: 7
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-reverse-engineering - **449**星
• awesome-hacking-lists - polymorf/findcrypt-yara - IDA pro plugin to find crypto constants (and more) (Python)

README

        
# findcrypt-yara

IDA pro plugin to find crypto constants (and more)

![bot](https://github.com/polymorf/findcrypt-yara/raw/master/screen.png)

## Installation Notes

If [yara](https://virustotal.github.io/yara/) is not already installed on your system, install the `yara-python` package with `pip`.

**Do not** install the `yara` pip package; it is not compatible with this plugin.

## User-defined rules

Custom rule files can be stored in :

 - `$HOME/.idapro/plugins/findcrypt-yara/*.rules` under Linux and MacOS.

- `%APPDATA%\\Roaming\\Hex-Rays\\IDA Pro\\plugin\\findcrypt-yara\\*.rules` under Windows.