mandiant / VM-Packages

Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
Apache License 2.0
123 stars 61 forks source link

Add ZIP support in VM-Install-IDA-Plugin & Add ida.plugin.dereferencing.vm #1020

Closed Ana06 closed 2 months ago

Ana06 commented 2 months ago

VM-Install-IDA-Plugin now in addition of supporting downloading an IDA plugin file to the plugins directory, it also supports ZIPs containing a plugin (and supporting files/directories). For ZIPs, we check if there is an inner folder (this is the case for GH ZIPs) and if there is a directory called 'plugins'. We copy all files in this directory with the exception of the README and the LICENSE file (often present in GH repos). The copied files must include $pluginName, which is used for uninstallation.

Use the IDA plugin template in create_package_template.py to generate ida.plugin.dereferencing.vm thank to the new ZIP support:

python3 scripts/utils/create_package_template.py --type IDA_PLUGIN --pkg_name "ida.plugin.dereferencing" --version "0.0.0.20240430" --authors "danigargu" --description "IDA Pro plugin that implements new registers and stack views." --tool_name "dereferencing.py" --target_url "https://github.com/danigargu/deREferencing/archive/c5c606a9e70bff48214ce5286a37b15752fd8d1b.zip" --target_hash "3ddec5c7569bc53883c5feaeb36d1145e2dde1c67491d14929af05938870dc1e"

Partially addresses https://github.com/mandiant/VM-Packages/issues/996

I would like to add this plugin to the default FLARE-VM installation, anything against it @mandiant/flare-vm ?

williballenthin commented 2 months ago

this is awesome!