pyflirt is a map file genarator for binary file based on flirt signature. Since it is used with ollydbg, only intel x86 binary is currently supported. This tool was succesfully tested with ollydbg 1.10 MapConv plugin to import the map file.
Require python capstone binding for disassembly
git clone https://github.com/mokhdzanifaeq/pyflirt
usage: pyflirt.py [-h] -b path -s path -o path optional arguments: -h, --help show this help message and exit -b path, --bin path path of binary file to be analysed -s path, --sig path path of signature file to be analysed -o path, --out path path of map file to be generated
Feel free to update the code as you like, fix bugs and implement new features.
- rheax - understanding flirt file format
- aquynh - capstone framework