Questions tagged [script]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
4
votes
1answer
683 views

How can I get the inferred register value for an instruction in Ghidra scripting?

I'd like to get the inferred value of a register at a particular point in the disassembly listing in a Ghidra script. In my case the target instruction is a rdmsr or wrmsr instruction, which reads or ...
0
votes
2answers
53 views

Determine if there is a cross reference using idapython given a specific address

I want to end up in something like the following using idapython to determine if given a specific address there is an xref (without caring where the XREF comes from) ea_start = # ea_end = # for ea in ...
1
vote
0answers
48 views

Ghidra SDK Register TypeFlags are not populated

I am using the Ghidra P-Code in a Ghidra script and I am looking for an architecture-independent way to decide if a register used in a P-Code Op is the Stack or the Base Pointer (basically making the ...
2
votes
0answers
44 views

Is there a way to resume execution of a process for a given amount of time then suspend it?

I am using the following IDC script in IDA: #include <idc.idc> static main() { for (i=0; i<10; i++) { PauseProcess(); ...
-1
votes
1answer
26 views

can a stdout captured at a parameter to python script

I'm working on a CTF challenge that is find a secret password.This secret password base on the username and password that i input and the hash value had print out after hash calculation and i want to ...
1
vote
1answer
95 views

Problem when opening a script file in IDA (syntax error)(pe_sections.idc)

I downloaded the script files from http://www.openrce.org/downloads/details/57/PE_Scripts. Then i extracted the files in the folder idc in the IDA folder (C:\Program Files\IDA 7.0\idc) I opened IDA (...
0
votes
1answer
179 views

How to run another IDA script using IDApython?

I'm using IDA batch scripting to run a script on a dataset of malware the problem is i need to run the VB6 idc script after auto analysis is finished, and wait for it to finish and find all the ...
1
vote
0answers
128 views

Is there any way to execute Hopper scripts from command line?

What should I do if I have a batch of binaries to decompile with Hopper? I know how to run a Hopper script in the UI interface, is there any way to run Hopper scripts from command line? Or any other ...
1
vote
0answers
77 views

Trying to understand linkedin's anti-robot system [closed]

I noticed something very odd about Linkedin anti-bot behavior and I am not being able to fully understand it. Basically, there are multiple people who set their profiles to public, allowing search ...
0
votes
1answer
2k views

IDAPython Script works from "Script File" but not when run with -S from Terminal

I'm trying to run an IDAPython script in IDA 7.1 on Windows 10 and it runs just fine when I run it from the Script File... command, but if when I run it from the command line it isn't working properly....
4
votes
1answer
502 views

How to get execution time of IDC script?

As a beginner I'm trying to disassemble a file with IDA Pro 6.8. I write some IDC script for time-consuming work. Now, I want to get the execution time of my script, but I can not find appropriate ...
1
vote
1answer
3k views

Running script on the command line with IDA Pro 7.0

I'm trying to run a script with IDAPython on Windows: PS: C:\Users\user\Downloads> ida.exe -S"tmp.py" -t >> PS: C:\Users\user\Downloads> and I had to press Ctrl+C to get out of the >&...
2
votes
0answers
753 views

Decode RubyEncoder

I was trying out some things when I came across some RubyEncoder encoded code. After searching the web, I found basically nothing useful on how to reverse them (Except this and [this][2], but I had no ...
3
votes
1answer
5k views

IDA Script, Get Function Name That has random Characters involved in name

I was trying to figure out if there is a way I can get the address for a function name that has random characters in it. For example the function name is "Player_GetStats_m29275" here the "m292755" is ...
3
votes
1answer
3k views

Reverse engineering Lingo scripts .DCR/.CCT files

I was wondering if I could get some tips on reverse engineering .dcr/.cct files to get Lingo scripts. I know with recover-cct/recover-dir you can get all the assets etc. but you can't get Lingo ...
0
votes
1answer
968 views

Help decrypt lua base64

Anyone knows how to decrypt this lua script ? https://raw.githubusercontent.com/PewPewPew2/BoL/master/DancingShoes.lua
2
votes
1answer
1k views

Obtaining the Pseudocode of a function via a script

I am looking for a way to obtain the pseudocode of a function via a script. I am using IDAPro 6.9 on OS X 10.11.4 (El Capitan). I did locate this documentation on using the decompiler in batch mode: ...
1
vote
1answer
685 views

Ida Pro compare constants in same function or not

How do I compare in IDA PRO if constants are located in the same functions or not.. like filter from all constants if I search for 2 constants or more I want to know which function(s) contain all the ...
6
votes
1answer
7k views

How to automatically rename some IDA functions from a given list?

I have a text file which contains a list of function name and address pairs, structured like this : 194C:841B LoadMessage 194C:8429 ShowDialog ... Is there a way (eg: script, automation, ...) to ...