Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 03-06-2022, 22:54
Kurapica's Avatar
Kurapica Kurapica is offline
VIP
 
Join Date: Jun 2009
Location: Archives
Posts: 190
Rept. Given: 20
Rept. Rcvd 143 Times in 42 Posts
Thanks Given: 67
Thanks Rcvd at 404 Times in 87 Posts
Kurapica Reputation: 100-199 Kurapica Reputation: 100-199
FLIRT Signature File Database

Hi

I found this on github : https://github.com/Maktm/FLIRTDB

anyone managed to make IDA load them into the signatures list ?

or are they too old for IDA 7.7 ?

Is there an alternative source for FLIRT signatures ?

I'm interested in Boost lib signatures.
Reply With Quote
  #2  
Old 03-07-2022, 11:08
TQN TQN is offline
VIP
 
Join Date: Apr 2003
Location: Vietnam
Posts: 341
Rept. Given: 142
Rept. Rcvd 20 Times in 12 Posts
Thanks Given: 166
Thanks Rcvd at 129 Times in 42 Posts
TQN Reputation: 20
Use this IDAPython script
Code:
def applySigFile():
    file = ida_kernwin.ask_file(0, "*.sig", "Select sig file to apply")
    if not file:
        print("applySigFile: user cancelled")
        return

    print("Apply sig file %s" % file)
    ida_funcs.plan_to_apply_idasgn(file)


def applySigDir():
    sig_dir = os.path.join(os.path.dirname(sys.executable), 'sig')
    sig_dir = str(QtWidgets.QFileDialog.getExistingDirectory(None, "Select Your Signatures Directory", sig_dir))
    if sig_dir == "":
        print("applySigDir: user cancelled")
        return

    for name in os.listdir(sig_dir):
        if name[-4:] == '.sig':
            name = os.path.join(sig_dir, name)
            print("Apply sig file %s" % name)
            ida_funcs.plan_to_apply_idasgn(name)
Same as til files
Reply With Quote
The Following 4 Users Say Thank You to TQN For This Useful Post:
Abaddon (03-07-2022), b30wulf (03-08-2022), Kurapica (03-07-2022), sh3dow (04-30-2022)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 18:03.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )