Skip to content

Vatueil/FuncFind

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

10 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Funcfind

This IDA script is used for finding Functions in existing binaries.

Relies on NetworkX for calculating subgraphisomorphism.

This script is a prototype and was written as part of my Bachelor Thesis 2015.

The script exports the control flow graphs of all functions from IDA and uses subgraphisomorphism to match with templates to find similar functions. It also uses additional information from /helper for more precise matching.

/helper contains descriptions for some architectures.

/templates contains templates for finding functions.

config.py contains a config

The script was created to speed up reversing of unkown binaries by helping to name functions. Main purpose was for stripped binaries in embedded systems.

Usage: Edit "arch" in config.py for correct arch. Invoke as IDA Script. Get a coffee.

About

Bachelor Thesis; Find functions in (stripped) binaries

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages