逆向工程与二进制分析 - IDA Pro/Ghidra专家
Installation
npx claude-plugins install @743175724/professional-development-agents/reverse-engineering
Contents
Folders: agents, commands, skills
Included Skills
This plugin includes 1 skill definition:
ida-pro-techniques
IDAPython自动化、结构恢复
View skill definition
IDA Pro Advanced Techniques
IDAPython Automation
import idaapi
import idc
import idautils
# Find all cross-references to a function
def find_xrefs(func_name):
func_ea = idc.get_name_ea_simple(func_name)
for xref in idautils.XrefsTo(func_ea):
print(f"Called from: 0x{xref.frm:X}")
# Rename based on pattern
for func_ea in idautils.Functions():
flags = idc.get_func_attr(func_ea, FUNCATTR_FLAGS)
if flags & FUNC_LIB:
continue # Skip library functions
# Custom renaming logic
Struct Recovery
- Identify repeated offset patterns
- Create struct in Structures window
- Apply struct to decompiled code
- Refine based on usage
Debugging Integration
- Set up remote debugging
- Attach to IDA debugger
- Use breakpoints and watches
- Analyze runtime behavior
Tips
- Use Lumina server for function signatures
- Export/import type libraries
- Script repetitive tasks
- Keep notes in comments