Want to Join Us ?

you'll be able to discuss, share and send private messages.

Python IDATACO IDA Pro Plugin by Arbor

Discussion in 'Plugins' started by storm shadow, Oct 27, 2015.

Share This Page

  1. storm shadow

    Techbliss Owner Admin Ida Pro Expert Developer

    Attached Files:

    roocoon, m4n0w4r and Rip Cord like this.
  2. roocoon

    Active Member

    What are the requirements for this?

    On IDA 6.1, it looks for PySide to be installed (which I don't have).
    On IDA 6.6, it crashes IDA on startup (both x86 and x64) (I have PySide but probably older version than what it needs).

    Thanks.
     
  3. storm shadow

    Techbliss Owner Admin Ida Pro Expert Developer

    Yes you need a newer build of idapython.
    its the python.plw that fails.
    I tried recode using PyQt4 insteed of pyside and it fails also.
    So nothibng wrong with you PySide
     
  4. roocoon

    Active Member

    Thanks for the clarification.
    I suppose the plugin was build for a later IDA than 6.6.
    Too bad. It looks pretty nice but it will have to wait.
    Cheers.
     
    storm shadow likes this.
  5. computerline

    Well-Known Member Ida Pro Expert

    Does not copy it to ida plugins directory, copy it to anywhere on disk and use File > Script file ... to load it :)
     
  6. roocoon

    Active Member

    You're kidding me?! I didn't expect that.
    Thank you very much :)
     
    computerline likes this.
  7. storm shadow

    Techbliss Owner Admin Ida Pro Expert Developer

    it works .
    He screw hes own plugin loader up with some stuff that does not seems to work as now.
    Be sure to have loaded a file in ida before open it as script insteed or it will do the same crash.
    I can do a loader for this if needed, so we can still have it in plugin
     
    Last edited: Nov 3, 2015
    roocoon likes this.
  8. storm shadow

    Techbliss Owner Admin Ida Pro Expert Developer

    okay here is the loader
    Put that in idafolder/plugins/IDATACO_Plugin_Loader.py

    put the idataco
    in
    idafolder/QtApps\idataco\idataco.py

    load via Edit>>plugins and load it under View menu
     

    Attached Files:

    gavz, computerline, Rip Cord and 2 others like this.
  9. roocoon

    Active Member

    Hats off storm shadow.
    I learn more (and faster) from the work done in this forum than in any Python books I looked at.
    Regards.
     
    Rip Cord and storm shadow like this.
  10. computerline

    Well-Known Member Ida Pro Expert

    Does anyone had way to crawn the malwr.com and produce cookoo json format use for this tools, I think it better to use malwr data instead install cookoo in local machine :)
     
  11. gavz

    Member

    • gavz
    • Dec 29, 2015
    • 15
    • 18
    --------------------------------------------------------------------------------------------------
    __author__ = 'zadow aka Storm Shadow'
    import re
    import idaapi
    import idc
    from idc import *
    from idaapi import *
    import PyQt4
    from PyQt4 import QtCore, QtGui
    import idautils
    -- correct -> PyQt4 to PySide
     
  12. storm shadow

    Techbliss Owner Admin Ida Pro Expert Developer

    im not sure what you mean @gavz
    -- correct -> PyQt4 to PySide
    its more
    PySide to PyQt4

    but in main app ypu can also do

    Code (Text):
    import PyQt4 as PySide
     
  13. gavz

    Member

    • gavz
    • Dec 29, 2015
    • 15
    • 18
    i mean this ->
     
  14. storm shadow

    Techbliss Owner Admin Ida Pro Expert Developer

    @gavz

    you are missing PyQt4 install the prebuild here
    1)
    http://www.techbliss.org/threads/py...-total-package-installer-by-storm-shadow.768/

    2)
    edit
    idataco.py
    add to line

    Code (Text):
    import idaapi
    import idc
    import idautils
    import sip
    import PyQt4 as PySide
    from PySide import QtGui, QtCore
    3)
    put idataco folder in the idafolder\QtApps\idataco
    ( You make a folder called QtApps)

    4)
    put edited idataco.py in folder
    idafolder\QtApps\idataco\idataco.py

    5)
    put my plugin loader in idafolder plugins.
    http://www.techbliss.org/threads/idataco-ida-pro-plugin-by-arbor.791/#post-2593

    6)
    load plugin with edit >>plugins >>load idataco
    then after its loaded load it oncxe more under menu View>>load taco
     
    Rip Cord and computerline like this.
  15. gavz

    Member

    • gavz
    • Dec 29, 2015
    • 15
    • 18
    Thanks
     
    storm shadow likes this.
Top