IDA-Pro/plugins/FindCrypt2

From aldeid
Jump to navigation Jump to search
You are here
FindCrypt2

Description

IDA Pro has a plug-in called FindCrypt2, included in the IDA Pro SDK. It searches constants known to be associated with cryptographic algorithm in the code.

Installation

  • Included in IDA Pro SDK. Can be manually downloaded:
findcrypt
http://www.hex-rays.com/idapro/freefiles/findcrypt.zip
http://www.hexblog.com/ida_pro/files/findcrypt.zip
findcrypt2
http://www.hexblog.com/ida_pro/files/findcrypt2.zip
  • Copy findcrypt.plw in your %IDAProInstallDir%\plugins directory.

Example

Gp to Edit > Plugins > Find crypt. Here is an example of output: