Questions tagged [script]
The script tag has no usage guidance.
28
questions
0
votes
1
answer
90
views
Need help understanding why Netflix prevents me from downloading with VPN
When using Netflix via the Windows desktop app with a VPN, streaming movies works fine but downloading does not. The download gets automatically paused, and after a minute it shows error code DL1-...
- 101
1
vote
1
answer
137
views
Retrieve & dump type information from IDA Pro
I want to retrieve IDA Pro .idb database's each type info, such as:
size and name of a structure;
each member variable type and name;
each member variable size and offset;
And dump it to a .h file ...
- 33
0
votes
2
answers
216
views
Ghidra scripting: get indirect operand address
I tried several hours to find a way to get the operand address which is displayed in the ghidra listing, but without success:
I know at least that the OperandType is "Address".
import ...
- 103
1
vote
1
answer
170
views
How to quickly mark functions library in IDA Pro?
I have a binary with debug information and I want to mark STL library functions with "Library function" tag as quick as possible, just by highlighting a range of functions and clicking some ...
- 33
1
vote
1
answer
105
views
Removing Ghidra auto-generated labels and create function. Overlapping namespace error
I am attempting to write a script to parse a function table containing structs that look like this:
struct func_table_entry {
void (* func)(void *);
byte unknown1;
byte unknown2;
byte ...
- 11
1
vote
1
answer
61
views
Need Help Figuring out Multi-byte (in-memory) byte replacement using ida script (idc)
"I am trying to create a simple IDC script for IDA 7.7, which takes a known memory address (in the format 0x00000000), a string of replacement bytes (either in the format ffffffff or ff ff ff ff, ...
- 13
1
vote
0
answers
56
views
Radare2: How to Create a Custom Scripted Panel?
TLDR: How do I get a panel in radare2 to correctly show the output of a radare2 command piped to an external script?
e.g. afvd | python var_displayer.py
This is my current view. Multiple panels, ...
- 11
2
votes
1
answer
164
views
write a windbg sript for a table of linkedlist
I'm writing a script for an array of LIST_ENTRY. Each LIST_ENTRY is a header of linkedlist.
From reference, I can use !list to perform the same operation for each element in the linkedlist.
0:000> !...
- 313
0
votes
1
answer
319
views
SQLite access from Ghidra script
I would like to access an SQLite database from within a Java Ghidra script. However, if I include the line import java.sql.*; in the script, Ghidra gives the error > Unable to locate script class:. ...
- 101
1
vote
0
answers
137
views
Ghidra SDK Register TypeFlags are not populated
I am using the Ghidra P-Code in a Ghidra script and I am looking for an architecture-independent way to decide if a register used in a P-Code Op is the Stack or the Base Pointer (basically making the ...
- 11
3
votes
0
answers
56
views
Is there a way to resume execution of a process for a given amount of time then suspend it?
I am using the following IDC script in IDA:
#include <idc.idc>
static main()
{
for (i=0; i<10; i++)
{
PauseProcess();
...
- 371
-1
votes
1
answer
101
views
can a stdout captured at a parameter to python script
I'm working on a CTF challenge that is find a secret password.This secret password base on the username and password that i input and the hash value had print out after hash calculation and i want to ...
- 1
5
votes
1
answer
3k
views
How can I get the inferred register value for an instruction in Ghidra scripting?
I'd like to get the inferred value of a register at a particular point in the disassembly listing in a Ghidra script.
In my case the target instruction is a rdmsr or wrmsr instruction, which reads or ...
- 1,252
1
vote
2
answers
700
views
Determine if there is a cross reference using idapython given a specific address
I want to end up in something like the following using idapython to determine if given a specific address there is an xref (without caring where the XREF comes from)
ea_start = #
ea_end = #
for ea in ...
- 11
1
vote
1
answer
516
views
Problem when opening a script file in IDA (syntax error)(pe_sections.idc)
I downloaded the script files from http://www.openrce.org/downloads/details/57/PE_Scripts.
Then i extracted the files in the folder idc in the IDA folder (C:\Program Files\IDA 7.0\idc)
I opened IDA (...
- 11
0
votes
1
answer
509
views
How to run another IDA script using IDApython?
I'm using IDA batch scripting to run a script on a dataset of malware
the problem is i need to run the VB6 idc script after auto analysis is finished, and wait for it to finish and find all the ...
- 232
1
vote
0
answers
175
views
Trying to understand linkedin's anti-robot system [closed]
I noticed something very odd about Linkedin anti-bot behavior and I am not being able to fully understand it. Basically, there are multiple people who set their profiles to public, allowing search ...
- 111
1
vote
0
answers
226
views
Is there any way to execute Hopper scripts from command line?
What should I do if I have a batch of binaries to decompile with Hopper?
I know how to run a Hopper script in the UI interface, is there any way to run Hopper scripts from command line? Or any other ...
- 11
4
votes
1
answer
639
views
How to get execution time of IDC script?
As a beginner I'm trying to disassemble a file with IDA Pro 6.8. I write some IDC script for time-consuming work.
Now, I want to get the execution time of my script, but I can not find appropriate ...
- 411
0
votes
1
answer
3k
views
IDAPython Script works from "Script File" but not when run with -S from Terminal
I'm trying to run an IDAPython script in IDA 7.1 on Windows 10 and it runs just fine when I run it from the Script File... command, but if when I run it from the command line it isn't working properly....
- 380
2
votes
0
answers
996
views
Decode RubyEncoder
I was trying out some things when I came across some RubyEncoder encoded code.
After searching the web, I found basically nothing useful on how to reverse them (Except this and [this][2], but I had no ...
- 43
1
vote
1
answer
4k
views
Running script on the command line with IDA Pro 7.0
I'm trying to run a script with IDAPython on Windows:
PS: C:\Users\user\Downloads> ida.exe -S"tmp.py" -t
>>
PS: C:\Users\user\Downloads>
and I had to press Ctrl+C to get out of the >&...
- 11
5
votes
1
answer
6k
views
IDA Script, get function that has random characters in its name
I was trying to figure out if there is a way I can get the address for a function name that has random characters in it.
For example the function name is "Player_GetStats_m29275" here the &...
- 53
4
votes
2
answers
3k
views
Reverse engineering Lingo scripts .DCR/.CCT files
I was wondering if I could get some tips on reverse engineering .dcr/.cct files to get Lingo scripts. I know with recover-cct/recover-dir you can get all the assets etc. but you can't get Lingo ...
0
votes
1
answer
1k
views
Help decrypt lua base64
Anyone knows how to decrypt this lua script ?
https://raw.githubusercontent.com/PewPewPew2/BoL/master/DancingShoes.lua
- 11
2
votes
1
answer
2k
views
Obtaining the Pseudocode of a function via a script
I am looking for a way to obtain the pseudocode of a function via a script. I am using IDAPro 6.9 on OS X 10.11.4 (El Capitan).
I did locate this documentation on using the decompiler in batch mode:
...
- 185
1
vote
1
answer
766
views
Ida Pro compare constants in same function or not
How do I compare in IDA PRO if constants are located in the same functions or not.. like filter from all constants if I search for 2 constants or more I want to know which function(s) contain all the ...
- 759
7
votes
1
answer
9k
views
How to automatically rename some IDA functions from a given list?
I have a text file which contains a list of function name and address pairs, structured like this :
194C:841B LoadMessage
194C:8429 ShowDialog
...
Is there a way (eg: script, automation, ...) to ...
- 371