Lumina requests support

williballenthin / python-idb

Pure Python parser and analyzer for IDA Pro database files (.idb).

Apache License 2.0

460 stars 73 forks source link

Lumina requests support #58

Open XVilka opened 5 years ago

XVilka commented 5 years ago

Would be nice to be able to request function information from Lumina servers without IDA Pro running.

williballenthin commented 5 years ago

yes, this would be a fascinating research project!

williballenthin commented 4 years ago

i had done some inspection of ida.wll to see how IDA constructs the hashes it sends to Lumina. I don't recall this being trivial, and seemed to include information about the stack layout to signature the function. fortunately, this was pretty obvious to find in the DLL, so it remains a feasible project.

XVilka commented 3 years ago

This might be relevant:

https://github.com/synacktiv/lumina_server
https://www.synacktiv.com/publications/investigating-ida-lumina-feature.html

ITAYC0HEN commented 3 years ago

This project as well: https://github.com/naim94a/lumen