• Stars
    star
    626
  • Rank 71,755 (Top 2 %)
  • Language
    Python
  • License
    GNU General Publi...
  • Created about 8 years ago
  • Updated over 4 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Making GO reversing easier in IDA Pro

golang_loader_assist.py

This is the golang_loader_assist.py code to accompany the blog I wrote, Reversing GO binaries like a pro (in IDA Pro). There is also the hello-go directory which contains the simple hello world code I used as an example.

Important notes

If you're using IDA Pro 7.3 or below, you likely will need to take a look at the older release tagged IDA-7.3-and-Below. This is due to changes in the IDA Python libraries which where introduced in 7.4 which do not look to be backwards compatible.

TODO

  • Support IDA Pro 7.5 w/ Python3 (tested with a go1.13.6 and go1.14.4 binary on IDA 7.5.200519 Linux x86_64)
  • Support IDA Pro 7.4
  • Retain IDA Pro 7.3 support via old release taggin
  • Convert all code to Python3 syntax
  • Get all code style into the same format
  • Clean up imports due to IDA Python changes

More Repositories

1

android-unpacker

Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
C
1,112
star
2

anti-emulator

Android Anti-Emulator
Java
787
star
3

android-scripts

Collection of Android reverse engineering scripts
C++
409
star
4

010Editor-stuff

A collection of 010 Editor specific stuff
Roff
401
star
5

APKfuscator

A generic DEX file obfuscator and munger
Ruby
259
star
6

android-lkms

Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators
C
205
star
7

dehoser

Unpacker for the HoseDex2Jar APK Protection which packs the original file inside the dex header
Java
70
star
8

elf-dump-fix

Utils use to dump android ELF from memory and do some fix including the ELF section header rebuilding
C
54
star
9

IDAnt-wanna

ELF header abuse
Python
46
star
10

Emacs-Smali

Smali/Baksmali mode for Emacs
Smali
33
star
11

dalvik-header-plugin

Dalvik Header Plugin for IDA Pro
C++
21
star
12

usb-accessory-gadget

Frida gadget for dumping traffic between an apk and usb device
TypeScript
18
star
13

LeNa-Decryption-Script

Legacy Native IDA Decryption Script
12
star
14

android-iptables

C
11
star
15

duml-packet

Parsing, modifying and using DUML packets
TypeScript
10
star
16

alpine-android-ndk

Slim dockerized Android ndk
Dockerfile
10
star
17

VirusTotalCommand

VirusTotalCommand -- Alternative VirusTotal API
Ruby
9
star
18

eglinfo-android

like glxinfo but for egl, like eglinfo but specifically for Android
C
8
star
19

praxis

a transparent proxy micro-service written in golang
Go
7
star
20

ewmami

A gem will allow you to query the Google Play APK Verification (AntiMalware) service
Ruby
7
star
21

distil-solver

Distil Anti-bot solver
Go
6
star
22

goguard

Golang obfuscator
5
star
23

recipes

CSS
4
star
24

no-go-scammers

Quick 'n dirty golang twilio bot for calling and annoying scammers
Go
4
star
25

analysis-scripts

A random assortment of analysis scripts
Python
3
star
26

Noref

No Referrer Chrome Extension
JavaScript
3
star
27

rapidshare

wrapper for RapidShare API
Ruby
3
star
28

regex-speed-test

Testing some fundamental concepts on Golang regex structures
Go
3
star
29

go-shc

go variant of shc
Go
3
star
30

microengine-eicar

Go
2
star
31

droidsuggest

Wrapper for the Android Market/Google Play Search suggestions
Ruby
2
star
32

neuterref

Kill referrers that might be leaked from gmail or other 'trusted' domains
JavaScript
2
star
33

test

HTML
1
star
34

blog

1
star
35

openSprinkl

open source version of a sprinkl controller
JavaScript
1
star
36

aoc

advent of code typescript
TypeScript
1
star
37

location-tests

HTML
1
star
38

docker-node-libusb

Dockerfile
1
star
39

duml-beagle-parse

Cut and parse DJI DUML packets out of an exported USB Beagle stream
TypeScript
1
star
40

nginx-cac-ocsp

A small project designed to encapsulate a full end-to-end test of CAC/PIV cards for testing purposes
Python
1
star