I stumbled upon findcrypt2 but it seems not to work anymore. Is there a new version of findcryp2 anywhere or are there similar plugins which are able to identify different crypto algorithms by checking specific constants etc.?
2 Answers
Try IDAsignsrch, or the original commandline version.
-
Does it work for anyone here on Mac OS X El Capitan? Either I'm too stupid to get it running or it's not working on OS X. Commented Jan 6, 2016 at 18:26
I was going to recommend IDAScope but it is broken in 6.9 as well. PySide has been dropped by IDA in favor of PyQT in 6.9.
Edit: Thanks to Daniel Plohmann, the plugin now supports IDA 6.9. You can see the fixed code here: committed 2fdeed1
-
1I will be looking into the necessary adaptions to make IDAscope work with PyQt instead of PySide in the next two weeks. :)– pnXCommented Jan 6, 2016 at 7:58
-
Thanks @pnx for updating the plugin. Edited my comment above. Commented Jan 8, 2016 at 17:25