Package proposal: bochs.vm

[av-gantimurov]

Package Name

bochs

Tool Name

Bochs

Package type

OTHER (installer)

Is the tool a console application?

false

Tool's version number

2.7

Category

Debuggers

Tool's authors

Donald Becker, Greg Alexander, Christophe Bothamy, Volker Ruppert, Bryce Denney, Stanislav Shwartsman

Tool's description

Bochs is a portable x86 PC emulation software package that can be used as debugger in IDA Pro (Local Bochs debugger).

Download URL

https://netcologne.dl.sourceforge.net/project/bochs/bochs/2.7/Bochs-win64-2.7.exe

Download SHA256 Hash

a7428585b30ec3633c00bd38ef9dbb2d6c91cb4c29daa39a3c9b6b89e719ba90

Dependencies

No response

Why is this tool a good addition?

After installing Bochs may be used as Local Bochs Debugger in IDA Pro. IDA Pro has special Bochs debugger for x86 an x64 code (https://hex-rays.com/products/ida/support/idadoc/1329.shtml).

Additional information about using bochs debugger with IDA Pro in old Hex-Rays article.

[Ana06]

@av-gantimurov thanks for the proposal! :+1: The provided hash is not an SHA256 hash, can you please update the issue description with the correct hash?

Can you please also provide a link to the IDA plugin in https://github.com/mandiant/VM-Packages/issues/719? :smiley:

[av-gantimurov]

@av-gantimurov thanks for the proposal! 👍 The provided hash is not an SHA256 hash, can you please update the issue description with the correct hash?

Can you please also provide a link to the IDA plugin in #719? 😃

I wrote MD5 instead of SHA256. Fixed. IDA Pro supports local bochs debugger without any extra plugins by default. Worked with IDA 8.3 on Windows 10 without fault. I added some links with information about using Bochs debugger in first message.

[Ana06]

I wrote MD5 instead of SHA256. Fixed.

Our bot processes the package proposals and send a PR for it when we add the send PR label, but the information needs to be accurate/as expected. That's why we can't use the MD5 hash. Thanks for correcting it. As you can see, our bot has already send a PR 😉

IDA Pro supports local bochs debugger without any extra plugins by default. Worked with IDA 8.3 on Windows 10 without fault. I added some links with information about using Bochs debugger in first message.

We will add Bochs without without the plugin and close this issue. So I was proposing you suggest/document the Bosch plugin in the existent issue about plugins additions so that we don't forget about it and we get it in as well. We don't have automation for plugins (yet). 😄

[Ana06]

@mandiant/flare-vm should we add bochs to the default flare-vm installation? I think so, I would like to be able to use Bochs in IDA. 🤔 Opinions?

[Ana06]

Sadly the package type was not correct, the downloaded exe is not the tool itself but an installer and our bot does not support this package type (yet). Does someone want to send a PR for this one? 😄

[av-gantimurov]

@mandiant/flare-vm should we add bochs to the default flare-vm installation? I think so, I would like to be able to use Bochs in IDA. 🤔 Opinions?

Bochs supported only in IDA Pro, IDA Home and IDA Free has only local debugger (+GDBServer in IDA Home).

[Ana06]

Bochs supported only in IDA Pro, IDA Home and IDA Free has only local debugger (+GDBServer in IDA Home).

Good point! I do use IDA Pro 😄 We even have tools in the default configuration that only work with IDA Pro and not outside IDA like the capa plugin (ida.plugin.capa.vm) that needs python. I think it is nice that is there after I install IDA Pro in a VM with FLARE-VM. 😉