Chapter 11. IDAPYTHON—SCRIPTING IDA PRO

IDA Pro[51] has long been the disassembler of choice for reverse engineers and continues to be the most powerful static analysis tool available. Produced by Hex-Rays SA[52] of Brussels, Belgium, led by its legendary chief architect Ilfak Guilfanov, IDA Pro sports a myriad of analysis capabilities. It can analyze binaries for most architectures, runs on a variety of platforms, and has a built-in debugger. Along with its core capabilities, IDA Pro has IDC, which is its own scripting language, and an SDK that gives developers full access to the IDA Plugin API.

Using the very open architecture that IDA provides, in 2004 Gergely Erdélyi and Ero Carrera released IDAPython, a plug-in that gives reverse engineers ...

Get Gray Hat Python now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.