|
|
|
Coloring junk code in IDA Pro |
Si vous voulez bloquer ce service sur vos fils RSS
Si vous voulez nous contacter ou nous proposer un fil RSS
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Coloring junk code in IDA Pro Par DeobfuscatedLe [2011-06-21] à 19:44:21
Présentation : Especially when reversing malware, junk code is always a pain. For the sake of readability, I often color junk code with some dark color. This makes the disassembly much more readable as shown below. However, coloring instructions in IDA Pro is not very handy. One has to go through menus Edit - Other - Color instruction... and pick up a color for every single block to be colored. That's why I wrote a very simple IDC script which can help with this and save some time. It simply colors the current instruction at the cursor location or the selected instructions, if any. Running the script on an instruction that's been colored already sets its color back to the default value. Also, a new hotkey j in this case is defined. include define JUNK_COLOR 0x7f5555 static ColorJunkCode auto start, end if start SelStart BADADDR start end ScreenEA else end SelEnd do if GetColor start, CIC_ITEM JUNK_COLOR SetColor start, CIC_ITEM, DEFCOLOR else SetColor start, CIC_ITEM, JUNK_COLOR start NextAddr start while start Script file... and you're ready to go. Hitting will now color current selected instructions. If you want IDA to load this script automatically, follow these steps - Store this script in IDA idc not mandatory but it makes sense to keep all scripts in the same directory - Edit IDA idc ida.idc Add the line include or whatever filename you like at the top of the file Copy paste the AddHotkey instruction into the function main - Remove the function main from colorjunk.idc
Les derniers articles du site "Deobfuscated" :
- Coloring junk code in IDA Pro
- Security Essentials Rogue AV Anti-Debugging
- More on moron packers and anti-debugging
- Big brother with big vulnerabilities...
- R.I.P milw0rm
- l0phtcrack 6 and Nmap 5 are out
- Null pointer dereference vulnerability in the Linux kernel
- Hey There's a worm in that apple
- Die Delphi, die
- And here comes another secure by design OS
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Si vous voulez bloquer ce service sur vos fils RSS :
- avec iptables "iptables -A INPUT -s 88.190.17.190 --dport 80 -j DROP"
- avec ipfw et wipfw "ipfw add deny from 88.190.17.190 to any 80"
- Nous contacter par mail
| Mini-Tagwall des articles publiés sur SecuObs : | | | | sécurité, exploit, windows, attaque, outil, microsoft, réseau, audit, metasploit, vulnérabilité, système, virus, internet, usbsploit, données, source, linux, protocol, présentation, scanne, réseaux, scanner, bluetooth, conférence, reverse, shell, meterpreter, vista, rootkit, détection, mobile, security, malicieux, engineering, téléphone, paquet, trames, https, noyau, utilisant, intel, wishmaster, google, sysun, libre |
| Mini-Tagwall de l'annuaire video : | | | | curit, security, biomet, metasploit, biometric, cking, password, windows, botnet, defcon, tutorial, crypt, xploit, exploit, lockpicking, linux, attack, wireshark, vmware, rootkit, conference, network, shmoocon, backtrack, virus, conficker, elcom, etter, elcomsoft, server, meterpreter, openvpn, ettercap, openbs, iphone, shell, openbsd, iptables, securitytube, deepsec, source, office, systm, openssh, radio |
| Mini-Tagwall des articles de la revue de presse : | | | | security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité |
| Mini-Tagwall des Tweets de la revue Twitter : | | | | security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack |
|
|
|
|
|
