View Single Post
  #22  
Old 08-09-2014, 09:37
Storm Shadow's Avatar
Storm Shadow Storm Shadow is offline
Family
 
Join Date: Jun 2014
Posts: 283
Rept. Given: 186
Rept. Rcvd 192 Times in 79 Posts
Thanks Given: 144
Thanks Rcvd at 254 Times in 98 Posts
Storm Shadow Reputation: 100-199 Storm Shadow Reputation: 100-199
you need to DL the yara sigs https://github.com/zerklabs/yarasigs
unpack all to lets say c:\yara . Then edit the
C:\Users\yourfolder\Downloads\ida\ida\plugins\IDAscope\idascope\config.py

line
Code:
 "inspection": {
        "default_semantics": "win-ring3"
        },
    "yara": {
        "yara_sigs": ["C:\\yara"]
        }
}
but Yara are for Malware sigs , the crypto search engine is in you picture also .

there are two options to perform crypto search.

I use it to search for s-boxes and other , on Powerpc targets so defently work with linux targets also.
Reply With Quote