Skip to content

Latest commit

 

History

History
9 lines (6 loc) · 590 Bytes

README.md

File metadata and controls

9 lines (6 loc) · 590 Bytes

Offline Binary Ninja plugin to search for Shellcode API Hashes using databases built with/for the Mandiant FLARE shellcode_hash_search project: https://github.com/mandiant/flare-ida/blob/master/python/flare/shellcode_hash_search.py

To install, copy the python file into your Binary Ninja plugin folder. (https://docs.binary.ninja/guide/plugins.html)

Run via the Plugins menu bar.

Known limitations:

  • Does not implement GUI for algorithm selection (All algorithms in database will be run)
  • Does not search through none code data (Only looks for arguments in instructions)