reverse-engineering

逆向工程与二进制分析 - IDA Pro/Ghidra专家

View on GitHub
Author 743175724
Namespace @743175724/professional-development-agents
Category security
Version 1.0.0
Stars 0
Downloads 10
self.md verified
Table of content

逆向工程与二进制分析 - IDA Pro/Ghidra专家

Installation

npx claude-plugins install @743175724/professional-development-agents/reverse-engineering

Contents

Folders: agents, commands, skills

Included Skills

This plugin includes 1 skill definition:

ida-pro-techniques

IDAPython自动化、结构恢复

View skill definition

IDA Pro Advanced Techniques

IDAPython Automation

import idaapi
import idc
import idautils

# Find all cross-references to a function
def find_xrefs(func_name):
    func_ea = idc.get_name_ea_simple(func_name)
    for xref in idautils.XrefsTo(func_ea):
        print(f"Called from: 0x{xref.frm:X}")

# Rename based on pattern
for func_ea in idautils.Functions():
    flags = idc.get_func_attr(func_ea, FUNCATTR_FLAGS)
    if flags & FUNC_LIB:
        continue  # Skip library functions
    # Custom renaming logic

Struct Recovery

  1. Identify repeated offset patterns
  2. Create struct in Structures window
  3. Apply struct to decompiled code
  4. Refine based on usage

Debugging Integration

Tips

Source

View on GitHub

Tags: security reverse-engineeringida-proghidrabinary-analysis