3

I stumbled upon findcrypt2 but it seems not to work anymore. Is there a new version of findcryp2 anywhere or are there similar plugins which are able to identify different crypto algorithms by checking specific constants etc.?

3

Try IDAsignsrch, or the original commandline version.

1
  • Does it work for anyone here on Mac OS X El Capitan? Either I'm too stupid to get it running or it's not working on OS X. – mr.proton Jan 6 '16 at 18:26
1

I was going to recommend IDAScope but it is broken in 6.9 as well. PySide has been dropped by IDA in favor of PyQT in 6.9.

Edit: Thanks to Daniel Plohmann, the plugin now supports IDA 6.9. You can see the fixed code here: committed 2fdeed1

2
  • 1
    I will be looking into the necessary adaptions to make IDAscope work with PyQt instead of PySide in the next two weeks. :) – pnX Jan 6 '16 at 7:58
  • Thanks @pnx for updating the plugin. Edited my comment above. – GelosSnake Jan 8 '16 at 17:25

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.