IDA Pro plug-in conversion of Luigi Auriemma's signsrch signature matching tool.

* Deprecated, will no longer be updated, please see my use my superior YARA for IDA plugin here:
https://github.com/kweatherman/yara4ida

* July 2018, updated to IDA 7.1

Luigi's original signsrch description:
"Tool for searching signatures inside files, extremely useful as help in
reversing jobs like figuring or having an initial idea of what encryption/-
compression algorithm is used for a proprietary protocol or file.
It can recognize tons of compression, multimedia and encryption algorithms and
many other things like known strings and anti-debugging code which can be also
manually added since it's all based on a text signature file read at run-time
and easy to modify."

Project Samples

IDA Dialog Example search output

Project Activity

See All Activity >

Follow IDA Signsrch

IDA Signsrch Web Site

Other Useful Business Software
Custom VMs From 1 to 96 vCPUs With 99.95% Uptime Icon
Custom VMs From 1 to 96 vCPUs With 99.95% Uptime

General-purpose, compute-optimized, or GPU/TPU-accelerated. Built to your exact specs.

Live migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
Start Free
Rate This Project
Login To Rate This Project

User Reviews

Be the first to post a review of IDA Signsrch!

Additional Project Details

Registered

2015-05-31
Report inappropriate content