Category Archives: IDA Pro

Extending IDAPython in IDA 6.5: Be careful about the GIL

Target audience You may want to read this if you have been writing an IDA C++ plugin, that itself uses the CPython runtime. Prior art In 2010, Elias Bachaalany wrote a blog post about extending IDAPython: http://www.hexblog.com/?p=126 Note that this … Continue reading

Posted in IDA Pro, IDAPython, Programming | Leave a comment

Interacting with IDA through IPC channels

I’m happy to present you a guest post by David Zimmer <dzzie@yahoo.com>. The approach he describes can be used to develop plugins more conveniently (but not limited to that): In this article we are going to discuss a mechanism that … Continue reading

Posted in IDA Pro | 2 Comments

Loading your own modules from your IDAPython scripts with idaapi.require()

TL;DR If you were using import to import your own “currently-in-development” modules from your IDAPython scripts, you may want to use idaapi.require(), starting with IDA 6.5. Rationale When using IDAPython scripts, users were sometimes facing the following issue Specifically: User … Continue reading

Posted in IDA Pro, IDAPython, Programming | 2 Comments

Recon 2012: Compiler Internals

This year I again was lucky to present at Recon in Montreal. There were many great talks as usual. I combined the topic of my last year’s talk on C++ reversing and my OpenRCE article on Visual C++ internals. New … Continue reading

Posted in IDA Pro, Programming, Uncategorized | 6 Comments

Calling IDA APIs from IDAPython with ctypes

IDAPython provides wrappers for a big chunk of IDA SDK. Still, there are some APIs that are not wrapped because of SWIG limitations or just because we didn’t get to them yet. Recently, I needed to test the get_loader_name() API … Continue reading

Posted in IDA Pro, IDAPython | Comments Off

Code viewer, forms & timers

In this post I’ll present some new things in IDA 6.2. There’s a new control, the code viewer, some additions to forms and the introduction of timers to discuss. All these new features have been exposed to the SDK, so … Continue reading

Posted in IDA Pro, Programming | Comments Off

IDA Pro 6.2 beta

Soon we are going to start testing the next IDA version. There will be many improvements. Some of them we have mentioned previously: Proximity view PE+ support for Bochs (64-bit PE files) UI shortcut editor Filters in choosers Database snapshots … Continue reading

Posted in IDA Pro | Tagged , , | 3 Comments

Filters & Shortcuts

Two of the new UI highlights in the upcoming IDA release are filtering capability for choosers and shortcut management. I’ll be discussing them in this post, although seeing them live in action is much nicer. Filters Filters make it possible … Continue reading

Posted in IDA Pro | 5 Comments

New feature in IDA 6.2: The proximity browser

The new IDA Pro 6.2 release will be featuring a new view called the “proximity browser” (only available in the Qt version).

Posted in IDA Pro | 2 Comments

Book review: IDA Pro Book, 2nd Edition

A few weeks ago we received an electronic copy of the “IDA Pro Book, 2nd Edition”. In the second edition of his 26 chapters book, Chris Eagle did a good job updating the book and covering the latest changes in … Continue reading

Posted in IDA Pro | Comments Off