Skip to content

mokhdzanifaeq/pyflirt

master
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
 
 
 
 
 
 
 
 

pyflirt

pyflirt is a map file genarator for binary file based on flirt signature. Since it is used with ollydbg, only intel x86 binary is currently supported. This tool was succesfully tested with ollydbg 1.10 MapConv plugin to import the map file.

Installation

Dependencies

Require python capstone binding for disassembly

Install

git clone https://github.com/mokhdzanifaeq/pyflirt

Usage

usage: pyflirt.py [-h] -b path -s path -o path

optional arguments:
  -h, --help           show this help message and exit
  -b path, --bin path  path of binary file to be analysed
  -s path, --sig path  path of signature file to be analysed
  -o path, --out path  path of map file to be generated

Screenshots

Before:

before

After:

after

License

Feel free to update the code as you like, fix bugs and implement new features.

Credits

  • rheax - understanding flirt file format
  • aquynh - capstone framework

About

map file generator for intel x86 binary based on flirt signature

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages