search

geohot / qira

QEMU Interactive Runtime Analyser
MIT License
3.92k stars 471 forks source link

How to get ida integration to work #242

Open hotwaterheater opened 4 years ago

hotwaterheater commented 4 years ago

Hey I installed qira on a fresh ubuntu 16.04, but I can't seem to get the IDA integration to work. Are there a series of steps I should follow to get them working together? I'm using the free education version of IDA (this might be the problem).

korniltsev commented 4 years ago

just copy qira.py to Ida's plugin folder

hotwaterheater commented 4 years ago

Thanks korniltsev, but I still don't get any interaction between them. I open the binary in IDA and also with qira using: qira -s ./ls (it's a copy of the ls binary in my home directory).

korniltsev commented 4 years ago

make sure to rebase the binary in ida, so it has the same base address as in qira(qemu). something like 0x40000000. Also make sure you see "[qira] client connected" in idapython console.

On 05/05/2020, hotwaterheater notifications@github.com wrote:

Thanks korniltsev, but I still don't get any interaction between them. I open the binary in IDA and also with qira using: qira -s ./ls (it's a copy of the ls binary in my home directory).

-- You are receiving this because you commented. Reply to this email directly or view it on GitHub: https://github.com/geohot/qira/issues/242#issuecomment-623849316

-- With regards, Anatoly.

hotwaterheater commented 4 years ago

Sorry I don't know how to do any of that, I'm totally new to IDA.