Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 03-06-2022, 22:54
Kurapica's Avatar
Kurapica Kurapica is online now
VIP
 
Join Date: Jun 2009
Location: Archives
Posts: 177
Rept. Given: 20
Rept. Rcvd 140 Times in 39 Posts
Thanks Given: 47
Thanks Rcvd at 338 Times in 70 Posts
Kurapica Reputation: 100-199 Kurapica Reputation: 100-199
FLIRT Signature File Database

Hi

I found this on github : https://github.com/Maktm/FLIRTDB

anyone managed to make IDA load them into the signatures list ?

or are they too old for IDA 7.7 ?

Is there an alternative source for FLIRT signatures ?

I'm interested in Boost lib signatures.
Reply With Quote
  #2  
Old 03-07-2022, 11:08
TQN TQN is offline
VIP
 
Join Date: Apr 2003
Location: Vietnam
Posts: 314
Rept. Given: 131
Rept. Rcvd 11 Times in 9 Posts
Thanks Given: 102
Thanks Rcvd at 69 Times in 29 Posts
TQN Reputation: 11
Use this IDAPython script
Code:
def applySigFile():
    file = ida_kernwin.ask_file(0, "*.sig", "Select sig file to apply")
    if not file:
        print("applySigFile: user cancelled")
        return

    print("Apply sig file %s" % file)
    ida_funcs.plan_to_apply_idasgn(file)


def applySigDir():
    sig_dir = os.path.join(os.path.dirname(sys.executable), 'sig')
    sig_dir = str(QtWidgets.QFileDialog.getExistingDirectory(None, "Select Your Signatures Directory", sig_dir))
    if sig_dir == "":
        print("applySigDir: user cancelled")
        return

    for name in os.listdir(sig_dir):
        if name[-4:] == '.sig':
            name = os.path.join(sig_dir, name)
            print("Apply sig file %s" % name)
            ida_funcs.plan_to_apply_idasgn(name)
Same as til files
Reply With Quote
The Following 4 Users Say Thank You to TQN For This Useful Post:
Abaddon (03-07-2022), b30wulf (03-08-2022), Kurapica (03-07-2022), sh3dow (04-30-2022)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 03:12.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX
( 1998 - 2022 )