findcrypt-yara
IDA pro plugin to find crypto constants (and more)
Installation Notes
If yara is not already installed on your system, install the yara-python
package with pip
.
Do not install the yara
pip package; it is not compatible with this plugin.
User-defined rules
Custom rule files can be stored in :
$HOME/.idapro/plugins/findcrypt-yara/*.rules
under Linux and MacOS.%APPDATA%\\Roaming\\Hex-Rays\\IDA Pro\\plugin\\findcrypt-yara\\*.rules
under Windows.