Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   FLIRT Signature File Database (https://forum.exetools.com/showthread.php?t=20104)

Kurapica 03-06-2022 22:54

FLIRT Signature File Database
 
Hi

I found this on github : https://github.com/Maktm/FLIRTDB

anyone managed to make IDA load them into the signatures list ?

or are they too old for IDA 7.7 ?

Is there an alternative source for FLIRT signatures ?

I'm interested in Boost lib signatures.

TQN 03-07-2022 11:08

Use this IDAPython script
Code:

def applySigFile():
    file = ida_kernwin.ask_file(0, "*.sig", "Select sig file to apply")
    if not file:
        print("applySigFile: user cancelled")
        return

    print("Apply sig file %s" % file)
    ida_funcs.plan_to_apply_idasgn(file)


def applySigDir():
    sig_dir = os.path.join(os.path.dirname(sys.executable), 'sig')
    sig_dir = str(QtWidgets.QFileDialog.getExistingDirectory(None, "Select Your Signatures Directory", sig_dir))
    if sig_dir == "":
        print("applySigDir: user cancelled")
        return

    for name in os.listdir(sig_dir):
        if name[-4:] == '.sig':
            name = os.path.join(sig_dir, name)
            print("Apply sig file %s" % name)
            ida_funcs.plan_to_apply_idasgn(name)

Same as til files


All times are GMT +8. The time now is 20:33.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX