findcrypt-yara

October 21, 2019 ยท View on GitHub

IDA pro plugin to find crypto constants (and more)

bot

Installation Notes

If yara is not already installed on your system, install the yara-python package with pip.

Do not install the yara pip package; it is not compatible with this plugin.

User-defined rules

Custom rule files can be stored in :

  • $HOME/.idapro/plugins/findcrypt-yara/*.rules under Linux and MacOS.
  • %APPDATA%\\Roaming\\Hex-Rays\\IDA Pro\\plugin\\findcrypt-yara\\*.rules under Windows.