3

I stumbled upon findcrypt2 but it seems not to work anymore. Is there a new version of findcryp2 anywhere or are there similar plugins which are able to identify different crypto algorithms by checking specific constants etc.?

2 Answers 2

3

Try IDAsignsrch, or the original commandline version.

1
  • Does it work for anyone here on Mac OS X El Capitan? Either I'm too stupid to get it running or it's not working on OS X.
    – mr.proton
    Commented Jan 6, 2016 at 18:26
1

I was going to recommend IDAScope but it is broken in 6.9 as well. PySide has been dropped by IDA in favor of PyQT in 6.9.

Edit: Thanks to Daniel Plohmann, the plugin now supports IDA 6.9. You can see the fixed code here: committed 2fdeed1

2
  • 1
    I will be looking into the necessary adaptions to make IDAscope work with PyQt instead of PySide in the next two weeks. :)
    – pnX
    Commented Jan 6, 2016 at 7:58
  • Thanks @pnx for updating the plugin. Edited my comment above.
    – GelosSnake
    Commented Jan 8, 2016 at 17:25

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.