https://github.com/repnz/ida-plugins

A collection of my IDA plugins
https://github.com/repnz/ida-plugins

Last synced: 21 days ago
JSON representation

A collection of my IDA plugins

• Host: GitHub
• URL: https://github.com/repnz/ida-plugins
• Owner: repnz
• Created: 2020-08-01T12:54:03.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2020-08-07T15:42:22.000Z (over 4 years ago)
• Last Synced: 2024-08-05T17:35:48.670Z (4 months ago)
• Language: Python
• Size: 52.7 KB
• Stars: 130
• Watchers: 9
• Forks: 19
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - repnz/ida-plugins - A collection of my IDA plugins (Python)

README

        
# IDA Plugins

My collection of plugins for IDA Pro.

## Installing plugins

- Install [sark](https://github.com/tmr232/Sark). 

You can simply put the script in the %idafolder%\\plugins directory, 

But I recommend that you use the plugins loader:

- Take the plugins loader plugin: 

https://github.com/tmr232/Sark/blob/master/plugins/plugin_loader.py

It allows you to manage your plugins by editing a plugins.list file.

- Put plugin_loader.py in the "plugins" directory of IDA.

- Open IDA as administrator and close it (so the plugins.list file will be created at %idafolder%\cfg)

- Add the path of the wanted plugin in this file (for example, c:\\...\\reg_xref.py)

 

## Register Cross References

When looking at disassembly, it's useful to find usages of a register - That's why I created [reg_xref](/reg_xref.py). 

Simply install the plugin and use Shift-Z to get a view like this:

![Alt Text](/pics/reg_xref.png)

*A notable mention is [Oregami](https://github.com/shemesh999/oregami),

But the main difference is that Oregami tries to analyze and find where the same value is used, and display

only these references. This is useful for example in case you want to mark a register as a pointer to a structure. 

I wanted something simpler that shows all of the references to a register inside a function.*