5167 dyld 0x1906edb38 dyld4::Loader::findAndRunAllInitializers(dyld4::RuntimeState&) cons...
BUGFIX: UI: instruction comments could disappear in the find all occurrences retrieved list BUGFIX: UI: it wasn't possible to effectively change the hotkey for proximity view BUGFIX: UI: numeric keypad keys were not working in hex view's edit mode BUGFIX: UI: plugin comments would not sh...
If you know of a plugin that could be added, or data in the list that could be updated, missing categories, typos.. please send a PR! If you'd just prefer sending me a message or an email that's fine too, my email should be pretty easy to find on GitHub. Plugins (see ...
BUGFIX: hexrays: ftst instruction was not decompiled BUGFIX: hexrays: hints for union members were wrong (off=N; where N is the member number, not the offset) BUGFIX: hexrays: if the return value of a function call was used but could not influence the logic of the program, the cal...
UI: OSX: IDA's main window will now appear as the top level window on OSX when idaq is started with an IDB file on the command line Debugger debugger: IDA reacts faster to the cancel button while searching for binary patterns debugger: now it is possible to stop a long memory snapshot...
gpt-3.5-turbo could not complete the request: You exceeded your current quota, please check your plan and billing details. Request to gpt-3.5-turbo sent... gpt-3.5-turbo could not complete the request: You exceeded your current quota, please check your plan and billing details. gepetto ...
Do we really need to construct a new cache HashMap every time we do a cache lookup? Of course not… We can just filter the entries while we are traversing the cache. Changing line 17 fromvalues.find{}tocache.get.find{}does not do cache-entry expiration at the time of every single lo...
ntoskrnl_base = find_base_address(idt_entry) if ntoskrnl_base is not None: print "\nThe base address of nt (ntoskrnl) is @ {}.".format(hex(ntoskrnl_base)) else: print "\nERROR: Could not find the base address of ntoskrnl after searching all resident memory. Something clearly went wr...
The structures window lists the data structures that could be found in the binary. IDA uses the functions and their known arguments to figure out whether there's a data structure present in the executable or not. In the case of the Meterpreter reverse executable, IDA didn't find any structur...
This is a fundamental difference, which means that the approach of Polus could not be easily replicated in OODIDA. In essence, we spawn a separate process that uses custom code. In order to replicate the approach of Polus, we would need to update the existing process, which would make ...