Git Product home page Git Product logo

swissarmyknife's Introduction

SwissArmyKnife

Various utilities for extending functionality in x64dbg.

IDA Imports


  • Allows loading and exporting of binary patches (*.dif)
  • Allows loading of signature files (*.sig) up to IDA version 6.1

Linker MAP Symbols


  • Allows for loading linker map files (*.map) produced by many compilers. Some information is located here. At the moment, exporting such files is not possible with the plugin API.

PEiD


  • Parses and loads PEiD signature databases.

Code Signatures


Four different signature styles are supported:

  1. Code style \x33\xC0\x33\xF6\x48\x89\x44\x24\x42\x89\x44\x24\x4A\x66\x89\x44\x24\x4E\x00\x00\x00\x00\x00\x00\x00\x48\x8B\xF9\xC7\x44\x00\x00\x00\x00\x00\x00\x48\x89\x44\x24\x60\x48 xxxxxxxxxxxxxxxxxx???????xxxxx??????xxxxxxxxxxx??????x????xxxxxxxxxxx??????xxxxxxxx
  2. IDA Style 33 C0 33 F6 48 89 44 24 42 89 44 24 4A 66 89 44 24 4E ? ? ? ? ? ? ? 48 8B F9 C7 44 ? ? ? ? ? ? 48 89 44 24 60 48
  3. PEiD Style 33 C0 33 F6 48 89 44 24 42 89 44 24 4A 66 89 44 24 4E ?? ?? ?? ?? ?? ?? ?? 48 8B F9 C7 44 ?? ?? ?? ?? ?? ?? 48 89 44 24 60 48

Cipher Detection


Findcrypt v2 with AES-NI
  • Support for finding AES-NI instructions.
  • Support for finding constants from: Blowfish, Camellia, CAST, CAST256, CRC32, DES, GOST, HAVAL, MARS, MD2, MD5, PKCS_MD2, PKCS_MD5, PKCS_RIPEMD160, PKCS_SHA256, PKCS_SHA384, PKCS_SHA512, PKCS_Tiger, RawDES, RC2, Rijndael, SAFER, SHA256, SHA512, SHARK, SKIPJACK, Square/SHARK, Square, Tiger,Twofish, WAKE, Whirlpool, zlib, SHA-1, RC5_RC6, MD5, MD4, HAVAL
AES-Finder
  • Searches for 128, 192 and 256-bit AES cipher keys

swissarmyknife's People

Contributors

justanotheranonymoususer avatar morsisko avatar mrexodia avatar nukem9 avatar thundercls avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

swissarmyknife's Issues

import map file bug

I've got an error when i imported the symbols from the .map file made by IDA:
Symbols have been truncated. like: Cutimer::fun(void *) may truncate to Cutimer.
But the ollydbg plugin does not have such bug.

我从 IDA 生成的.map文件导入符号, 发生了错误:
符号被截断, 像这样: Cutimer::Fun(void *),会变成 Cutimer。

但是 ollydbg 插件不会发生这样的BUG。

Build binaries with static linking

When I'm on a new computer, I get an error that visual studio runtime is not found. It would be nice to have quick access to binaries which are built with static libraries and that don't depend on the visual studio runtime. If possible, please build such a version and upload it to releases.

x64 Release and Build doesn't work with x64dbg latest snapshot

Just letting the developer know (and also anyone who also is using this plugin) that the latest x64 build doesn't work with the x64 / x64dbg version on the latest snapshot as of 9/23/2020. Reverting to a snapshot in January in 2020 resolved the problem.

The error was: "The procedure entry point ConvertVAtoFileOffset could not be located in the dynamic link library
<path_to_plugin.dp64>"

This might just be an issue with the newest snapshot, so feel free to close this.

Signature creation problems

Maybe I'm missing something but the signature creation doesn't seem to actually create a signature. It just checks if the user provided signature is found and logs how many times.
It would be great to have signature creation like sigmaker for IDA.

ConvertVAtoFileOffset problem


x32dbg.exe - 无法找到入口

无法定位程序输入点 ConvertVAtoFileOffset 于动态链接库 xxxxxx64dbg_2020_09_21\release\x32\plugins\SwissArmyKnife.dp32 上。

确定

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.