Skip to content

Files

Latest commit

 

History

History

IDA_Script

idascript by lichao890427

These scripts are all wrote be me, when encountered with difficult tasks, also ease things for you.

1.add_xref_for_macho.py

	Description:
	  When you deal with macho file with ida, you'll find out that it's not easy to find Objc-Class 
	member function's caller and callee, (because it use msgSend instead of direct calling 
	convention), so we need to make some connection between the selector names and member function 
	pointers, it's what my script just do ^_^
	Usage: 
	  just load script from ida, after some output then you can got what you want
	Feature:	
	  1. connect seletors with member function pointer 
	  2. get current member function's caller  

image 3. get member function where current 'msgSend' lead to
image

2.read_unicode.py

	Description:
	  When there is chinese unicode character in programe, due to python's shortage, ida could not 
	recongnized them correctly, it's what my script just do ^_^, apply to many circumstance
	Usage: 
	  When deal with macho file, you only need to run the script, and it will automatically find 
	unicode string in segment named "__ustring"; and if deal with other type, you need to  addtionally 
	call function 'find_utf16_string(addr)' to find them

image Notice: Due to the disadvantable of python2 itself, there still many characters could not be shown

3.add_info_for_androidgdb.py

	Description:
	  When you debug android with IDA and gdbserver, you'd find that the module list and segment is
	empy, while we can read info from /proc/[pid]/, it's what my script just do ^_^  

4.trace_instruction.py

	Description:
	  this script is to trace instruction stream in one run   

5.detect_ollvm.py

	Description:
	  this script is to detect ollvm and fix it in some extent, apply to android and ios, enjoy ^_^
	  function "try_trace_fix_ollvm" used to fix ollvm
	  function "check_ollvm" used to find ollvm in android so file
	  function "find_ios_ollvm_branches" used to find ollvm in macho file  

6.add_block_for_macho.py

	Description:
	  this script is used to analysis block structure exist in macho file, target NSConcreteStackBlock/
	  NSConcreteGlobalBlock currently, also contain some wonderful skills    

image

7.ida_utils.py

	Description:
	  some useful function wrotten before