Questions tagged [script]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
51 views

Need help understanding why Netflix prevents me from downloading with VPN

When using Netflix via the Windows desktop app with a VPN, streaming movies works fine but downloading does not. The download gets automatically paused, and after a minute it shows error code DL1-...
Verpous's user avatar
  • 101
1 vote
1 answer
91 views

Retrieve & dump type information from IDA Pro

I want to retrieve IDA Pro .idb database's each type info, such as: size and name of a structure; each member variable type and name; each member variable size and offset; And dump it to a .h file ...
void_17's user avatar
  • 33
0 votes
2 answers
79 views

Ghidra scripting: get indirect operand address

I tried several hours to find a way to get the operand address which is displayed in the ghidra listing, but without success: I know at least that the OperandType is "Address". import ...
karsten's user avatar
  • 103
1 vote
1 answer
128 views

How to quickly mark functions library in IDA Pro?

I have a binary with debug information and I want to mark STL library functions with "Library function" tag as quick as possible, just by highlighting a range of functions and clicking some ...
void_17's user avatar
  • 33
1 vote
1 answer
64 views

Removing Ghidra auto-generated labels and create function. Overlapping namespace error

I am attempting to write a script to parse a function table containing structs that look like this: struct func_table_entry { void (* func)(void *); byte unknown1; byte unknown2; byte ...
Cole's user avatar
  • 11
1 vote
1 answer
55 views

Need Help Figuring out Multi-byte (in-memory) byte replacement using ida script (idc)

"I am trying to create a simple IDC script for IDA 7.7, which takes a known memory address (in the format 0x00000000), a string of replacement bytes (either in the format ffffffff or ff ff ff ff, ...
user3654535's user avatar
1 vote
0 answers
40 views

Radare2: How to Create a Custom Scripted Panel?

TLDR: How do I get a panel in radare2 to correctly show the output of a radare2 command piped to an external script? e.g. afvd | python var_displayer.py This is my current view. Multiple panels, ...
Khalid's user avatar
  • 11
2 votes
1 answer
151 views

write a windbg sript for a table of linkedlist

I'm writing a script for an array of LIST_ENTRY. Each LIST_ENTRY is a header of linkedlist. From reference, I can use !list to perform the same operation for each element in the linkedlist. 0:000> !...
anonymous bear's user avatar
0 votes
1 answer
292 views

SQLite access from Ghidra script

I would like to access an SQLite database from within a Java Ghidra script. However, if I include the line import java.sql.*; in the script, Ghidra gives the error > Unable to locate script class:. ...
HaLailah HaZeh's user avatar
1 vote
0 answers
130 views

Ghidra SDK Register TypeFlags are not populated

I am using the Ghidra P-Code in a Ghidra script and I am looking for an architecture-independent way to decide if a register used in a P-Code Op is the Stack or the Base Pointer (basically making the ...
gerion's user avatar
  • 11
3 votes
0 answers
53 views

Is there a way to resume execution of a process for a given amount of time then suspend it?

I am using the following IDC script in IDA: #include <idc.idc> static main() { for (i=0; i<10; i++) { PauseProcess(); ...
tigrou's user avatar
  • 371
-1 votes
1 answer
86 views

can a stdout captured at a parameter to python script

I'm working on a CTF challenge that is find a secret password.This secret password base on the username and password that i input and the hash value had print out after hash calculation and i want to ...
y_man's user avatar
  • 1
5 votes
1 answer
2k views

How can I get the inferred register value for an instruction in Ghidra scripting?

I'd like to get the inferred value of a register at a particular point in the disassembly listing in a Ghidra script. In my case the target instruction is a rdmsr or wrmsr instruction, which reads or ...
Polynomial's user avatar
  • 1,252
1 vote
2 answers
615 views

Determine if there is a cross reference using idapython given a specific address

I want to end up in something like the following using idapython to determine if given a specific address there is an xref (without caring where the XREF comes from) ea_start = # ea_end = # for ea in ...
Shad3's user avatar
  • 11
1 vote
1 answer
487 views

Problem when opening a script file in IDA (syntax error)(pe_sections.idc)

I downloaded the script files from http://www.openrce.org/downloads/details/57/PE_Scripts. Then i extracted the files in the folder idc in the IDA folder (C:\Program Files\IDA 7.0\idc) I opened IDA (...
random dude's user avatar
0 votes
1 answer
469 views

How to run another IDA script using IDApython?

I'm using IDA batch scripting to run a script on a dataset of malware the problem is i need to run the VB6 idc script after auto analysis is finished, and wait for it to finish and find all the ...
Mery Ted's user avatar
  • 232
1 vote
0 answers
167 views

Trying to understand linkedin's anti-robot system [closed]

I noticed something very odd about Linkedin anti-bot behavior and I am not being able to fully understand it. Basically, there are multiple people who set their profiles to public, allowing search ...
Rafael Magalhães's user avatar
1 vote
0 answers
217 views

Is there any way to execute Hopper scripts from command line?

What should I do if I have a batch of binaries to decompile with Hopper? I know how to run a Hopper script in the UI interface, is there any way to run Hopper scripts from command line? Or any other ...
M0nkbai's user avatar
  • 11
4 votes
1 answer
623 views

How to get execution time of IDC script?

As a beginner I'm trying to disassemble a file with IDA Pro 6.8. I write some IDC script for time-consuming work. Now, I want to get the execution time of my script, but I can not find appropriate ...
user6903's user avatar
  • 411
0 votes
1 answer
2k views

IDAPython Script works from "Script File" but not when run with -S from Terminal

I'm trying to run an IDAPython script in IDA 7.1 on Windows 10 and it runs just fine when I run it from the Script File... command, but if when I run it from the command line it isn't working properly....
theTheodidact's user avatar
2 votes
0 answers
975 views

Decode RubyEncoder

I was trying out some things when I came across some RubyEncoder encoded code. After searching the web, I found basically nothing useful on how to reverse them (Except this and [this][2], but I had no ...
GabrielTK's user avatar
1 vote
1 answer
4k views

Running script on the command line with IDA Pro 7.0

I'm trying to run a script with IDAPython on Windows: PS: C:\Users\user\Downloads> ida.exe -S"tmp.py" -t >> PS: C:\Users\user\Downloads> and I had to press Ctrl+C to get out of the >&...
anonymous's user avatar
5 votes
1 answer
6k views

IDA Script, get function that has random characters in its name

I was trying to figure out if there is a way I can get the address for a function name that has random characters in it. For example the function name is "Player_GetStats_m29275" here the &...
Arsalan Awan's user avatar
4 votes
2 answers
3k views

Reverse engineering Lingo scripts .DCR/.CCT files

I was wondering if I could get some tips on reverse engineering .dcr/.cct files to get Lingo scripts. I know with recover-cct/recover-dir you can get all the assets etc. but you can't get Lingo ...
Joshua Bakker's user avatar
0 votes
1 answer
1k views

Help decrypt lua base64

Anyone knows how to decrypt this lua script ? https://raw.githubusercontent.com/PewPewPew2/BoL/master/DancingShoes.lua
maxstreiker's user avatar
2 votes
1 answer
2k views

Obtaining the Pseudocode of a function via a script

I am looking for a way to obtain the pseudocode of a function via a script. I am using IDAPro 6.9 on OS X 10.11.4 (El Capitan). I did locate this documentation on using the decompiler in batch mode: ...
ericg's user avatar
  • 185
1 vote
1 answer
763 views

Ida Pro compare constants in same function or not

How do I compare in IDA PRO if constants are located in the same functions or not.. like filter from all constants if I search for 2 constants or more I want to know which function(s) contain all the ...
SSpoke's user avatar
  • 759
7 votes
1 answer
9k views

How to automatically rename some IDA functions from a given list?

I have a text file which contains a list of function name and address pairs, structured like this : 194C:841B LoadMessage 194C:8429 ShowDialog ... Is there a way (eg: script, automation, ...) to ...
tigrou's user avatar
  • 371