Jump to content

Interactive Binary Patching plugin for IDA Pro


3 posts in this topic

Recommended Posts

Updated (edited)
  • It says for malware analysis, software reverse engineering but it does support IOS binaries

Features

  • Revert Patch

    Finally, if you are ever unhappy with a patch you can simply right click patched blocks of instructions to revert them to their original value.

  • Force Conditional Jump

    Forcing a conditional jump to always execute a 'good' path is another common patching action. The plugin will only show this action when right clicking a conditional jump instruction.

 

Overview

Patching assembly code to change the behavior of an existing program is not uncommon in malware analysis, software reverse engineering, and broader domains of security research. This project extends the popular IDA Pro disassembler to create a more robust interactive binary patching workflow designed for rapid iteration.

This project is currently powered by a minor fork of the ubiquitous Keystone Engine, supporting x86/x64 and Arm/Arm64 patching with plans to enable the remaining Keystone architectures in a future release.

https://github.com/gaasedelen/patching

 

 

 

Updated by Rook
  • Like 6
  • Thanks 1

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines