Want to Join Us ?

you'll be able to discuss, share and send private messages.

Fentanyl + WWCD for better IDA View & Patcher

Discussion in 'Plugins' started by computerline, Jul 17, 2016.

Share This Page

  1. computerline

    Well-Known Member Ida Pro Expert

    I modified some in Fentanyl to support Assemble Patch with Keystone Assembler :)
    This can patch any instruction if it is valid IDA instruction or keystone instruction (Context Menu : Patch > Assemble)

    Example:
    In x64, IDA instruction
    Code (Text):
    48 8D 0D 71 D1 00 00                    lea  rcx, off_14000E370
    This is not a valid instruction, it reminder only, instead
    Code (Text):
    48 8D 0D 71 D1 00 00                    lea  rcx, qword ptr [rip + 0xD171]
    is valid with keystone, so could use the keystone to assemble it and patch it to IDA
    :)
     

    Attached Files:

    Last edited: Jul 17, 2016
    steve007iii, gavz, Rip Cord and 2 others like this.
  2. storm shadow

    Techbliss Owner Admin Ida Pro Expert Developer

    cool
     
    computerline likes this.
  3. mayl8822

    Member

    thanks
     
    computerline likes this.
  4. computerline

    Well-Known Member Ida Pro Expert

  5. steve007iii

    Active Member

    We need support for IDA version 7.0 Fentanyl + Keystone it's an excellent combination...
     
  6. computerline

    Well-Known Member Ida Pro Expert

    wwcd for ida7.0, hope it will be useful :)
     

    Attached Files:

    roocoon, ThangCuAnh, gavz and 4 others like this.
  7. gavz

    Member

    • gavz
    • Dec 29, 2015
    • 14
    • 12
    Thanks !!!
     
    computerline likes this.
  8. steve007iii

    Active Member

    Code (Text):
    C:\Program Files\IDA 7.0\plugins\fentanyl.py: 'module' object has no attribute 'GetIdaDirectory'
    Traceback (most recent call last):
      File "C:\Program Files\IDA 7.0\python\ida_idaapi.py", line 553, in IDAPython_ExecScript
        execfile(script, g)
      File "C:/Program Files/IDA 7.0/plugins/fentanyl.py", line 180, in <module>
        icons_path = os.path.join(idc.GetIdaDirectory(), 'plugins', 'FentanylCore', 'icons')
    AttributeError: 'module' object has no attribute 'GetIdaDirectory'
    Var Sistem, I have this defined...
    IDADIR = C:\Program Files\IDA 7.0
    No reference "GetIdaDirectory" in: IDA 7.0 SDK: Porting from IDA 4.9-6.x API to IDA 7.0 API

    any ideas?
     
    storm shadow likes this.
  9. computerline

    Well-Known Member Ida Pro Expert

    idc.GetIdaDirectory could be replace by idaapi.idadir(None)

    https://transfer.sh/T7plt/fentanyl_ida7_plugins.7z

    You could try my minor fixup
     
  10. steve007iii

    Active Member

    Computerline, as always, you did an excellent job

    Something strange happens, I had this error

    [​IMG]

    In: FentanylCore/AssembleForm.py """ Initialize form elements """ line: 246 It says

    Code (Text):
            self.ui_cntls = {
                'inp':idaapi.Form.MultiLineTextControl('', idaapi.textctrl_info_t.TXTF_FIXEDFONT),
                #'inp': idaapi.Form.StringInput(tp=None, width=1024, swidth=40, hlp=None, value='', size=None),
                'opt_chk':idaapi.Form.ChkGroupControl(('fixup', 'nopout')),
                'form_cb':idaapi.Form.FormChangeCb(self._form_cb),
            }
            self.ui_form = idaapi.Form("""STARTITEM {id:inp}
    I had to make the next change

    Code (Text):
            self.ui_cntls = {
                'inp':ida_kernwin.Form.MultiLineTextControl('', ida_kernwin.textctrl_info_t.TXTF_FIXEDFONT),
                #'inp': idaapi.Form.StringInput(tp=None, width=1024, swidth=40, hlp=None, value='', size=None),
                'opt_chk':ida_kernwin.Form.ChkGroupControl(('fixup', 'nopout')),
                'form_cb':ida_kernwin.Form.FormChangeCb(self._form_cb),
            }
            self.ui_form = ida_kernwin.Form("""STARTITEM {id:inp}
    This is a Temporary Solution...

    Strangely IDA 7.0 does not address well the API "idaapi" and I had to point directly to "ida_kernwin"

    Any idea why this happens?
     
  11. storm shadow

    Techbliss Owner Admin Ida Pro Expert Developer

    Yes !
    They have split up idaapi to mutible modules, where idaa_kernwin is the main module in ida 7.+
     
    steve007iii and Rip Cord like this.
  12. steve007iii

    Active Member

    Fentanyl for IDA 7.+ Updated Libraries in Fentanyl.py and FentanylCore/*.py
     

    Attached Files:

    Last edited: May 26, 2018
Top