Skip to content
#

ida-pro

Here are 120 public repositories matching this topic...

Grazfather
Grazfather commented Apr 9, 2018

we should be able to determine the name of the syscall and the args, based on the abi.

If we assume linux (we shouldn't) we can put this in the arch.

is_syscall
get_syscall_args

are probably the only methods we need to add. man syscall to see the abis.
Only issue is that we don't know, unless we hardcode, which args are used, unless we backtrack to see which registers were written

xx55x
xx55x commented Jul 24, 2019

Description

In pwndbg release 2017.02.01 build: 1ab3de0, when registers changed while debugging a program, there would be an asterisk near the changed register which could be customized with context-register-changed-marker and context-register-changed-color.

These config options are still available, however in later releases (both 2018.07.29 and 2019.01.25) there doesn't seem to be a

saidelike
saidelike commented Mar 8, 2019

As discussed on IRC, I personally found the naming of project/databases confusing at first. so I propose instead:

  • Project: maybe using "File" is better? Dunno, but it corresponds to a unique file hash. Otherwise "Project" is fine
  • Database: I think "Snapshot" is better, but is up to you.

Clarifying that any change that does not trigger an event in IDA will not be synced to others, hence

vanhauser-thc
vanhauser-thc commented Mar 13, 2018

If you look at the current AutoRE view, you see all the functions that call functions that are defined in the TAG list.
However, the functions in the TAG list will most times only be a small part of the overall functions that are imported from various libraries. And it will never be feasible to adapt your python script to have all possible imports in the TAG list.

So, a second view (because th

shiftre
shiftre commented Feb 26, 2017

Right now we're uploading exactly 100 functions in order to be efficient and save space,
however some binaries would not include 100 functions at all, maybe 10 or 20,
while others might include 60k.

This value should be tuned and fixed, maybe a percentage or a minimum number of functions.

located in actions/match.py in perform_upload()

Improve this page

Add a description, image, and links to the ida-pro topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the ida-pro topic, visit your repo's landing page and select "manage topics."

Learn more

You can’t perform that action at this time.