https://github.com/polymorf/findcrypt-yara

IDA pro plugin to find crypto constants (and more)
https://github.com/polymorf/findcrypt-yara

Last synced: 7 days ago
JSON representation

IDA pro plugin to find crypto constants (and more)

• Host: GitHub
• URL: https://github.com/polymorf/findcrypt-yara
• Owner: polymorf
• License: bsd-3-clause
• Created: 2017-03-20T16:02:35.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2024-11-19T11:36:18.000Z (23 days ago)
• Last Synced: 2024-11-28T16:04:51.765Z (14 days ago)
• Language: Python
• Size: 320 KB
• Stars: 1,360
• Watchers: 51
• Forks: 243
• Open Issues: 7
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-reverse-engineering - **449**星
• awesome-hacking-lists - polymorf/findcrypt-yara - IDA pro plugin to find crypto constants (and more) (Python)

README

        
# findcrypt-yara

IDA pro plugin to find crypto constants (and more)

![bot](https://github.com/polymorf/findcrypt-yara/raw/master/screen.png)

## Installation Notes

If [yara](https://virustotal.github.io/yara/) is not already installed on your system, install the `yara-python` package with `pip`.

**Do not** install the `yara` pip package; it is not compatible with this plugin.

## User-defined rules

Custom rule files can be stored in :

 - `$HOME/.idapro/plugins/findcrypt-yara/*.rules` under Linux and MacOS.

- `%APPDATA%\\Roaming\\Hex-Rays\\IDA Pro\\plugin\\findcrypt-yara\\*.rules` under Windows.