PSA: I’ll be at #codeblue_jp next week in Tokyo. Website: https://codeblue.jp/
#reverseengineering #idapro #hexrays #idapython

Code Execution in IDA MCP Servers

This article explains how to run IDA Python scripts using IDA's Multiple Command Processor (MCP) feature, enhancing reverse engineering workflows.

https://jro.sg/ida-mcp-exec.html

#mcp #idapython

Any #IDAPython pros here? I have asked a question on Reverse Engineering StackExchange:

How to get rid of warning "Undefined or unknown machine type" using IDA Python?

https://reverseengineering.stackexchange.com/questions/33279/how-to-get-rid-of-warning-undefined-or-unknown-machine-type-using-ida-python

Any reply/comment will welcome ☺️

#Nimfilt has been updated to work with the API changes in the newly released #IDAPro 9.0 (while keeping it backwards-compatible with IDA 8.X)
+ more strings should now be properly typed and named!

https://github.com/eset/nimfilt

For other plugin/script writers: the #IDAPython documentation and the porting guide are still contradicting each other in places...🤦 It seems like the porting guide is more up-to-date, but YMMV

Soo, the #IDA directory functionality (from the ida_dirtree module) is reeaaal weird about ".."
It's both a valid directory name AND a reference to the parent directory... This leads to some great counterintuitive behavior 😵‍

(starting fresh for every command):

dirtree.mkdir("../")
/
Ok

dirtree.mkdir("../test")
/
└── test
Sure

dirtree.mkdir("../..")
/
Looks good

dirtree.mkdir("../../")
/
└── ..
Huh?

dirtree.mkdir("dir1/../dir2")
/
├── dir1
│ └── ..
└── dir2
Wtf?

Thank you #IDAPython for introducing infinite recursion issues to my code in new, unexpected ways! 😬

February Plugin Roundup 🗞️ AntiDebugSeeker was again the most downloaded #IDAPlugin 👏 It is also great to see q3vm making it to the chart for the first time 🤩 Do you think your plugin is good enough to be in the top 5 🤔 https://plugins.hex-rays.com/

#PluginRoundup #IDAPython

Our #PluginCommunitySurvey has concluded 🎉 An enormous Thank You to all of you who took the time to participate and share valuable insights 🙏 In the meantime, we have contacted the winners of the mugs, so check your inbox to see if you are among the lucky ones 👀

#IDAPython #idapro

New year - new leader! AntiDebugSeeker was the most downloaded #IDAplugin in January! The 3rd place was for abyss. Congratulations to Driver Buddy for its first appearance in the chart. Got a cool plugin? Publish it today🌐https://plugins.hex-rays.com

#PluginRoundup #IDAPython

This is your last chance to participate in our #PluginCommunitySurvey! We’ve already received many great insights and suggestions, but we also want your feedback. Send it today for a chance to win a cool IDA Mug 🌐 https://hex-rays.com/blog/participate-in-our-ida-plugin-community-survey/?utm_source=Social-Media&utm_medium=Mastodon&utm_campaign=Plugin-Community_survey-02

#IDAPython #idapro

🐍#IDAPython continues to baffle me! Working on a script for #nim binaries, I realized that reading data outside the IDB's currently mapped memory just return an appropriate number of 0xFF bytes...
Which leads to some truly bizarre behavior like:
idaapi.get_byte(idaapi.BADADDR) --> 0xff 🤦

We’ve just published a #PluginFocus article by David Catalán. He introduces his q3vm plugin - a handy tool that includes the loader and processor modules to help analyze binaries built with the Quake III virtual machine obfuscator. 🌐 https://hex-rays.com/blog/plugin-focus-q3vm/?utm_source=Social-Media-Post&utm_medium=Mastodon&utm_campaign=Plugin-Focus-msdocviewer

#IDAPython

Your opinion counts! Participate in our IDA Plugin Community Survey and share your insights. Your feedback is key to improving the overall #IDAPlugin experience.

🌟Give us a few minutes of your time and you might win a very cool IDA Mug! 🎁

Take the survey now 🌐 https://hex-rays.com/blog/participate-in-our-ida-plugin-community-survey/?utm_source=Social-Media&utm_medium=Mastodon&utm_campaign=Plugin-Community_survey-01

#IDAPython #Plugin #idapro #survey

What I want to do in #ghidra, specifically, is to show a list in a GUI, as well as show directed graphs, as I do with choosers and GraphViewer objects in #IDAPython, in case you are curious. And, optionally, show a tree list like the one used for functions, classes, etc... in Ghidra.

We conclude the year with IDAClu on the top, and golang_loader_assist appears in the chart for the first time! Have you got a cool plugin that deserves attention? Send it to us, and let’s see if it will make it to the chart 🌐 https://plugins.hex-rays.com

#PluginRoundup #IDAPython

Viewing Microsoft’s technical specifications in IDA? That’s possible with Alexander Hanel’s Plugin – msdocviewer. Read our new #PluginFocus article and learn more about this simple but helpful tool 🌐 https://hex-rays.com/blog/plugin-focus-msdocviewer/?utm_source=Social-Media-Post&utm_medium=Mastodon&utm_campaign=Plugin-Focus-msdocviewer

#IDAPython

Is anyone interested in installing IDA plugins as Python packages, using pip?

I wrote a POC if anyone wants to try it https://github.com/tmr232/ida-plugin-loader/tree/python-entry-point

#python #idapython #reverseengineering

A total dominance for the top 5 plugins in November! There were no significant changes, except Virtuailor was back in the game! Could you change that? Publish your plugin on our #PluginRepository, and you might get a cool cap 🌐https://hex-rays.com/blog/the-plugin-submission-initiative/?utm_source=Social-Media-Post&utm_medium=Mastodon&utm_campaign=plugin-submission-initiative-06

#PluginRoundup #IDAPython

We’ve got some cool stuff today! A #PluginFocus article by Baptiste Verstraeten from the @thalium_team . He introduces #Symless - a nifty tool aiming to simplify the process of retrieving & defining structures, classes, and virtual tables 🌐 https://hex-rays.com/blog/plugin-focus-symless/?utm_source=Social-Media-Post&utm_medium=Mastodon&utm_campaign=Plugin-Focus-Symless

#IDAPython

We’ve just got the results for October 🤩 Congratulations to IdaClu for taking over the first place 👏 Want to challenge the leader? Publish your plugin on our #PluginRepository, win a cool cap, and get in the game 🌐https://hex-rays.com/blog/the-plugin-submission-initiative/?utm_source=Social-Media-Post&utm_medium=Mastodon&utm_campaign=plugin-submission-initiative-05

#PluginRoundup #IDAPython