hgl544272065 发表于 2020-12-17 11:29:46

IDA_Pro_7.5安装keypatch、Findcrypt插件

本帖最后由 hgl544272065 于 2020-12-17 11:36 编辑

0x00Python包管理工具
   pip是Python包管理工具,安装pip这个工具,可以很方便的安装线上Python程序依赖库。

0x01IDA Pro_7.5安装keypatch、Findcrypt插件的方法
插件下载;https://github.com/keystone-engine/keypatch
                https://github.com/polymorf/findcrypt-yara
(1)安装Python3
(2)Python_pip下载慢的解决方法:
    国内的一些镜像网站
    清华大学:https://pypi.tuna.tsinghua.edu.cn/simple
    阿里云:http://mirrors.aliyun.com/pypi/simple/
    中国科技大学 https://pypi.mirrors.ustc.edu.cn/simple/
    华中科技大学:http://pypi.hustunique.com/
    山东理工大学:http://pypi.sdutlinux.org/   豆瓣:http://pypi.douban.com/simple/
在 C:/用户/你的用户名 这个路径下创建一个pip文件夹,然后在其目录中建立一个pip.ini文件,并输入以下内容
index-url = https://pypi.tuna.tsinghua.edu.cn/simple

trusted-host=mirrors.aliyun.com
(2)以管理员身份运行CMD
(3)安装Python包管理工具pip:
      >>> pip install pip
            升级pip版本:>>> pip install --user --upgrade pip
            提示 No module named pip 解决方法:>>> python -m ensurepip
(4)>>> pip install keystone-engine
(5)>>> pip install six
(6)将 keypatch.py 放入 IDA 的 plugins 目录

(7)pip install yara-python
(8)将 findcrypt3.py、 findcrypt3.rules 放入 IDA 的 plugins 目录

0x02其它Py插件的安装可以举一反三
提示没有‘xxx’模块你,你就尝试安装‘xxx’模块
    如:No module named 'xxx'
    你就:pip install xxx




lincosmos 发表于 2020-12-17 12:09:55

感谢分享。

pizazzboy 发表于 2020-12-17 13:21:23

谢谢表哥分享。虽然我不会用IDA.

qinghg2020 发表于 2020-12-17 16:09:10

谢谢表哥分享

slzslz 发表于 2020-12-17 16:55:08

本帖最后由 slzslz 于 2020-12-19 13:23 编辑

有么有组装好的绿色版,很需要啊,谢谢
https://www.python.org/downloads/release/python-391/
https://github.com/VirusTotal/yara/releases
curl https://bootstrap.pypa.io/get-pip.py -o get-pip.py
python get-pip.py
https://blog.csdn.net/liwugang43210/article/details/50732920

index-url = https://pypi.tuna.tsinghua.edu.cn/simple

trusted-host=mirrors.aliyun.com

xmhwws 发表于 2020-12-17 18:02:37

pip出问题了,请问大佬如何解决?
WARNING: pip is configured with locations that require TLS/SSL, however the ssl module in Python is not available.
WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError("Can't connect to HTTPS URL because the SSL module is not available.")': /simple/pip/
WARNING: Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError("Can't connect to HTTPS URL because the SSL module is not available.")': /simple/pip/
WARNING: Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError("Can't connect to HTTPS URL because the SSL module is not available.")': /simple/pip/
WARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError("Can't connect to HTTPS URL because the SSL module is not available.")': /simple/pip/
WARNING: Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError("Can't connect to HTTPS URL because the SSL module is not available.")': /simple/pip/
Could not fetch URL https://pypi.org/simple/pip/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='pypi.org', port=443): Max retries exceeded with url: /simple/pip/ (Caused by SSLError("Can't connect to HTTPS URL because the SSL module is not available.")) - skipping
Requirement already up-to-date: pip in d:\python\lib\site-packages (20.2.4)
WARNING: pip is configured with locations that require TLS/SSL, however the ssl module in Python is not available.
Could not fetch URL https://pypi.org/simple/pip/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='pypi.org', port=443): Max retries exceeded with url: /simple/pip/ (Caused by SSLError("Can't connect to HTTPS URL because the SSL module is not available.")) - skipping

878306890 发表于 2020-12-18 21:07:41

感谢分享   虽然用不上

slzslz 发表于 2020-12-20 21:50:46

不知道为啥KEYPATCH装不上

9797 发表于 2021-1-20 15:59:04

为啥我安装好后插件列表内还是没有呀,,,唉
页: [1]
查看完整版本: IDA_Pro_7.5安装keypatch、Findcrypt插件