polymorf / findcrypt-yara

IDA pro plugin to find crypto constants (and more)
BSD 3-Clause "New" or "Revised" License
1.36k stars 243 forks source link

AttribbuteError: 'str' object has no attribute 'rule' #4

Closed galaris closed 6 years ago

galaris commented 7 years ago
screen shot 2017-11-08 at 23 26 58

Any ideas of why do I get this error message upon running the plugin?

Etherealblade commented 7 years ago

i use ida pro 7.0, and got the same problem

vanhauser-thc commented 6 years ago

same here using 7.0 x64

vanhauser-thc commented 6 years ago

I got it to work ...

do not install "yara-python" ! your must only install "yara". And perhaps copy libyara.dll to c:\python27\dlls

if you have yara-python then this is loaded instead and it all fails ...

ed4wg commented 6 years ago

@vanhauser-thc - i found it to be exactly the opposite.

I had to pip uninstall yara, and just pip install yara-python. Once i did that, the plugin works.

ohyeah521 commented 6 years ago

this will help https://github.com/amliaW4/hexo-bak/blob/201a78cc2ba660a773cd523f087b53aa150d5f45/source/_posts/ida-for-mac-tools-inst.md

xanarin commented 6 years ago

Can this information be added to the README.md in the project repo? I think it's non-obvious that python-yara should be installed as opposed to yara.

cssxn commented 6 years ago

fixes this thing. reinstall the newer verison of yara-pyhton