a200k / ida-pro-sigmaker

Signature maker plugin for IDA 8.x

IDA Pro SigMaker

Signature Maker Plugin for IDA Pro 8.3

Requirements

• IDA Pro Plugin SDK 8.3. Previous versions >= 8.0 might work as well though.

Installation

Drop into plugins folder of your IDA installation.

%AppData%\Hex-Rays\IDA Pro\plugins

Usage

In disassembly view, select a line you want to generate a signature for, and press CTRL+ALT+S

The generated signature will be printed to the output console, as well as copied to the clipboard:

---

Signature type	Example preview
IDA Signature	E8 ? ? ? ? 45 33 F6 66 44 89 34 33
x64Dbg Signature	E8 ?? ?? ?? ?? 45 33 F6 66 44 89 34 33
C Byte Array Signature + String mask	\xE8\x00\x00\x00\x00\x45\x33\xF6\x66\x44\x89\x34\x33 x????xxxxxxxx
C Raw Bytes Signature + Bitmask	0xE8, 0x00, 0x00, 0x00, 0x00, 0x45, 0x33, 0xF6, 0x66, 0x44, 0x89, 0x34, 0x33 0b1111111100001

---

Finding XREFs

Generating code Signatures by data or code xrefs and finding the shortest ones is also supported:

---

Signature searching

Searching for Signatures works for supported formats:

Just enter any string containing your Signature, it will automatically try to figure out what kind of Signature format is being used:

Currently, all output formats you can generate are supported.

Match(es) of your signature will be printed to console:

ida-pro-sigmaker's Issues

hi

i want use it with arm v7 but its take all the bytes , can you make it support arm v7

Support for searching for signatures

I would love if you could implement the pattern search functionality from the original sig maker.

Any other information you would like to exchange

I saw the content you sent on the unknowncheats forum. I have recently been imitating the cheating program for Apex Legends, but I lack some knowledge and information on how to bypass anti-debugging. I think you can help me, and I hope you can give it to me. Some help, technical communication and coding help are greatly appreciated.
I hope you can give me a discord contact information, thank you very much again.

Clipboard.

Pattern doesn't get copied to clipboard.

Freezes my IDA while I create a signature for rebased 0x0 dumps

^^

No wildcard for code selection

Original SigMaker had option to make signature from code selection, your version also has it from what I can see, but it doesn't support wildcards while creating pattern from code selection. This feature was really amazing.

hi

can you share sdk ?