Go Back   Exetools > General > General Discussion


Thread Tools Display Modes
Old 03-06-2022, 22:54
Kurapica's Avatar
Kurapica Kurapica is offline
Join Date: Jun 2009
Location: Archives
Posts: 174
Rept. Given: 20
Rept. Rcvd 140 Times in 39 Posts
Thanks Given: 46
Thanks Rcvd at 337 Times in 69 Posts
Kurapica Reputation: 100-199 Kurapica Reputation: 100-199
FLIRT Signature File Database


I found this on github : https://github.com/Maktm/FLIRTDB

anyone managed to make IDA load them into the signatures list ?

or are they too old for IDA 7.7 ?

Is there an alternative source for FLIRT signatures ?

I'm interested in Boost lib signatures.
Reply With Quote
Old 03-07-2022, 11:08
TQN TQN is offline
Join Date: Apr 2003
Location: Vietnam
Posts: 309
Rept. Given: 130
Rept. Rcvd 11 Times in 9 Posts
Thanks Given: 98
Thanks Rcvd at 63 Times in 25 Posts
TQN Reputation: 11
Use this IDAPython script
def applySigFile():
    file = ida_kernwin.ask_file(0, "*.sig", "Select sig file to apply")
    if not file:
        print("applySigFile: user cancelled")

    print("Apply sig file %s" % file)

def applySigDir():
    sig_dir = os.path.join(os.path.dirname(sys.executable), 'sig')
    sig_dir = str(QtWidgets.QFileDialog.getExistingDirectory(None, "Select Your Signatures Directory", sig_dir))
    if sig_dir == "":
        print("applySigDir: user cancelled")

    for name in os.listdir(sig_dir):
        if name[-4:] == '.sig':
            name = os.path.join(sig_dir, name)
            print("Apply sig file %s" % name)
Same as til files
Reply With Quote
The Following 4 Users Say Thank You to TQN For This Useful Post:
Abaddon (03-07-2022), b30wulf (03-08-2022), Kurapica (03-07-2022), sh3dow (04-30-2022)

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

All times are GMT +8. The time now is 21:59.

Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX
( 1998 - 2022 )