![]() |
|
#22
|
||||
|
||||
|
you need to DL the yara sigs https://github.com/zerklabs/yarasigs
unpack all to lets say c:\yara . Then edit the C:\Users\yourfolder\Downloads\ida\ida\plugins\IDAscope\idascope\config.py line Code:
"inspection": {
"default_semantics": "win-ring3"
},
"yara": {
"yara_sigs": ["C:\\yara"]
}
}
there are two options to perform crypto search. I use it to search for s-boxes and other , on Powerpc targets so defently work with linux targets also. |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Find the Algorithm | mcr4ck | General Discussion | 3 | 05-26-2020 18:19 |
| Find the Algorithm | mcr4ck | General Discussion | 18 | 02-06-2020 15:43 |