View Single Post
Old 06-04-2021, 16:23
sh3dow sh3dow is offline
Join Date: Oct 2014
Posts: 111
Rept. Given: 101
Rept. Rcvd 77 Times in 22 Posts
Thanks Given: 327
Thanks Rcvd at 135 Times in 46 Posts
sh3dow Reputation: 77
Originally Posted by TempoMat View Post
Unfortunately there was no mention of the name of the plug-in so that it can be
The tool they developed wasn't open source and this is the problem of academic publishing. so the name of it wouldn't help you at all. though they mentioned many tools you find them here []

I used my university email hoping he will send the code to me and I will share it here.


In the meantime there:

1- Findcrypt and Findcrypt2 and FindCrypt3

2- Findcrypt-yara (Yara based)

3- idascope

4- IDAsignsrch, and its original commandline version

Last edited by sh3dow; 06-04-2021 at 16:35. Reason: Fix Formating
Reply With Quote
The Following 4 Users Say Thank You to sh3dow For This Useful Post:
Artic (09-19-2021), niculaita (06-05-2021), schrodyn (06-05-2021), TQN (06-08-2021)