Interactive IDA Plugin List

This is a comprehensive list of plugins for IDA Pro that is more interactive, that is, it can be sorted and filtered to help with finding plugins of interest. It also has extra metadata like the language the plugin is written in, when the plugin was last updated, and an attempt at putting plugins into categories.

The dynamic version is hosted on GitHub Pages. Below you can still find a standard, static version of the list.

Go to interactive list

Contribute!

Any contribution is welcome one way or another. If you know of a plugin that could be added, or data in the list that could be updated, missing categories, typos.. please send a PR! If you'd just prefer sending me a message or an email that's fine too, my email should be pretty easy to find on GitHub.

Plugins (see interactive version)

361 plugins

• 3DSX Loader: IDA PRO Loader for 3DSX files
  Updated: 2021 12 26    Language: Python

• aarch64-sysreg-ida: IDA plugin to show ARM MSRs nicely.
  Updated: 2022 02 11    Language: Python

• abyss: Postprocess Hexrays Decompiler Output
  Updated: 2022 01 30    Language: Python

• ActionScript 3: An ActionScript 3 processor module and Flash debugger plugin.
  Updated: 2018 10 05    Language: Python

• Adobe Flash disassembler: The 2 plugins present in this archive will enable IDA to parse SWF files, load all SWF tags as segments for fast search and retrieval, parse all tags that can potentially contain ActionScript2 code, discover all such code(a dedicated processor module has been written for it) and even name the event functions acording to event handled in it (eg. OnInitialize). Download
  Language: C++

• alleycat:

  • Finds paths to a given code block inside a function
  • Finds paths between two or more functions
  • Generates interactive call graphs
  • Fully scriptable
    Updated: 2021 06 02    Language: Python

• AlphaGolang: IDApython Scripts for Analyzing Golang Binaries.
  Updated: 2022 05 02    Language: Python

• AMIE: A Minimalist Instruction Extender. AMIE is a Python rework of FRIEND that focuses solely on the ARM architecture (only AArch32 and AArch64 are supported). It is both lightweight and dependency-free, and provides the most relevant and up-to-date information about the ARM system registers and instructions.
  Updated: 2019 10 27    Language: Python

• Amnesia: Amnesia is an IDAPython module designed to use byte level heuristics to find ARM thumb instructions in undefined bytes in an IDA Pro database. Currently, the heuristics in this module find code in a few different ways. Some instructions identify and define new code by looking for comon byte sequences that correspond to particular ARM opcodes. Other functions in this module define new functions based on sequences of defined instructions.
  Updated: 2018 04 26    Language: Python

• Android/Linux vmlinux Loader: vmlinux.py is a python script which can load vmlinux image in both IDA Pro
  Updated: 2020 11 22    Language: Python

• Android Debugging: This version have both support for native arm debugging via usb and sdk ADV manager.
  Updated: 2015 04 05    Language: Python

• Android Scripts Collection: Collection of Android reverse engineering scripts that make my life easier
  Updated: 2020 05 03    Language: Python

• Andromeda-payload: IDAPython script for decryption payload of Andromeda malware.
  Updated: 2013 03 30    Language: Python

• APIScout: This project aims at simplifying Windows API import recovery. As input, arbitrary memory dumps for a known environment can be processed (please note: a reference DB has to be built first, using apiscout/db_builder). The output is an ordered list of identified Windows API references with some meta information, and an ApiVector fingerprint. Includes a convenience GUI wrapper for use in IDA.
  Updated: 2022 01 17    Language: Python

• AutoRE: Auto-renaming plugin with tagging support.
  Updated: 2021 08 04    Language: Python

• Back 2 The Future: Find patterns of vulnerabilities on Windows in order to find 0-day and write exploits of 1-days. We use Microsoft security updates in order to find the patterns.
  Updated: 2021 08 09    Language: Python

• bankswitch: Nintendo Entertainment System (NES) bank switcher: plugin for NES ROMs, simulates bank switching/paging.
  Updated: 2018 12 18    Language: C++

• Beautify: An IDA plugin for making pseudocode better.
  Updated: 2022 02 01    Language: Python

• BinAuthor: Match an author to an unknown binary.
  Updated: 2020 05 04    Language: Python

• BinCAT: BinCAT is a static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA.
  Updated: 2021 12 15    Language: Python

• BinClone: BinClone: detecting code clones in malware [SERE 2014]
  Updated: 2015 04 04    Language: C++

• BinDiff: BinDiff by Zynamics (now Google) is a comparison tool for binary files, that assists vulnerability researchers and engineers to quickly find differences and similarities in disassembled code.
  Updated: 2021 06 07

• BinExport: Export disassemblies into Protocol Buffers. BinExport is the exporter component of BinDiff. It is a plugin/extension for IDA that exports disassembly data into the Protocol Buffer format that BinDiff requires.
  Updated: 2022 04 21    Language: C++

• Binkit: Binkit Plugin For IDA. Use this plugin to load diffing result files (*.json)...
  Updated: 2020 10 05    Language: Python

• BinNavi: BinNavi is a binary analysis IDE - an environment that allows users to inspect, navigate, edit, and annotate control-flow-graphs of disassembled code, do the same for the callgraph of the executable, collect and combine execution traces, and generally keep track of analysis results among a group of analysts.
  Updated: 2020 10 23

• Bin Sourcerer: BinSourcerer (a.k.a RE-Source Online) is an assembly to source code matching framework for binary auditing and malware analysis.
  Updated: 2015 02 04    Language: Python

• Bip: Bip is a project which aims to simplify the usage of python for interacting with IDA. Its main goals are to facilitate the usage of python in the interactive console of IDA and the writing of plugins.
  Updated: 2020 09 09    Language: Python

• blc: Binary Lifting Contraption: Integrate Ghidra's decompiler as an Ida plugin.
  Updated: 2021 04 24    Language: C++

• Bootroom Analysis Library: IBAL is the IDA Pro Bootrom Analysis Library, which contains a number of useful functions for analyzing embedded ROMs.
  Updated: 2015 02 12    Language: Python

• Bosch ME7: Siemens Bosch ME7.x Disassembler Helper for IDA Pro
  Updated: 2018 01 22    Language: C++

• BRUTAL IDA: Block Redo & Undo To Achieve Legacy IDA.
  Updated: 2019 08 01    Language: Python

• Capa Explorer: Capa explorer is an IDAPython plugin that integrates the FLARE team's open-source framework, capa, with IDA Pro. capa is a framework that uses a well-defined collection of rules to identify capabilities in a program.
  Updated: 2022 04 27    Language: Python

• CGC Loader: IDA Loader for DARPA CGC binaries.
  Updated: 2018 04 09    Language: C++

• CGEN: CGEN with support for generating IDA Pro IDP modules.
  Updated: 2015 12 28    Language: Scheme

• Class Informer: Scans an MSVC 32bit target IDB for vftables with C++ RTTI, and MFC RTCI type data. Places structure defs, names, labels, and comments to make more sense of class vftables ("Virtual Function Table") and make them read easier as an aid to reverse engineering. Creates a list window with found vftables for browsing.
  Updated: 2018 07 14    Language: C++

• Classy: Helps users easily manage classes in IDA Pro. Vtables can be generated by selecting a range, functions can be assigned to classes, their signatures can be easily editing and mangled, IDA structs can be assigned, C headers can be generated, probably more.
  Updated: 2022 02 04    Language: Python

• codatify:

  • Defines ASCII strings that IDA's auto analysis missed
  • Defines functions/code that IDA's auto analysis missed
  • Converts all undefined bytes in the data segment into DWORDs (thus allowing IDA to resolve function and jump table pointers)
    Updated: 2021 06 02    Language: Python

• Codemap: Codemap is a binary analysis tool for "run-trace visualization" provided as IDA plugin.
  Updated: 2016 07 01    Language: Python

• collabREate: collabREate is a plugin for IDA Pro that is designed to provide a collaborative reverse engineering capability for multiple IDA users working on the same binary file.
  Updated: 2021 09 01    Language: C++

• CollaRE: Multi-tool reverse engineering collaboration solution. CollareRE is a tool for collaborative reverse engineering that aims to allow teams that do need to use more then one tool during a project to collaborate without the need to share the files on a separate locations.
  Updated: 2022 02 16    Language: Python

• COMFinder: IDA plugin for COM.
  Updated: 2020 04 08    Language: Python

• Comida: Comida is a plugin which searches all the references of the GUID COM object (Common Object Model) and deduce the associated type using the Hexrays plugin to improve the readability of the code.
  Updated: 2020 05 13    Language: Python

• Condstanta: Search for constant values that are used in conditional statements such as if and switch-case or for functions that contain multiple specific constants.
  Updated: 2022 03 29    Language: Python

• Continuum: Continuum is an IDA Pro plugin adding multi-binary project support, allowing fast navigation in applications involving many shared libraries.
  Updated: 2016 09 13    Language: Python

• Cortex M Firmware: The Cortex M Firmware module grooms an IDA Pro database containing firmware from an ARM Cortex M microcontroller. This module will annotate the firmware vector table, which contains a number of function pointers. This vector table annotation will cause IDA Pro to perform auto analysis against the functions these pointers point to.
  Updated: 2018 04 26    Language: Python

• CrowdDetox: The CrowdDetox plugin for Hex-Rays automatically removes junk code and variables from Hex-Rays function decompilations.
  Updated: 2021 05 03    Language: C++

• CTO: Call Tree Overviewer: IDA plugin for creating a simple and efficient function call tree graph. It can also summarize function information such as internal function calls, API calls, static linked library function calls, unresolved indirect function calls, string references, structure member accesses, specific comments.
  Updated: 2021 12 24    Language: Python

• D-810: D-810 is an IDA Pro plugin which can be used to deobfuscate code at decompilation time by modifying IDA Pro microcode.
  Updated: 2021 02 25    Language: Python

• Dalvik Header: This is a simple Dalvik header plugin for IDA Pro
  Updated: 2013 01 22    Language: C++

• Data Xref Counter: Enumerates all of the the x-references in a specific segment and counts the frequency of usage. The plugin displays the data in QtTableWidget and lets the user filter and sort the references. You can also export the data to a CSV file.
  Updated: 2015 09 17    Language: Python

• DBGHider: An IDA plugin aims to hide debugger from processes (Windows).
  Updated: 2018 06 19    Language: Python

• DebugAutoPatch: Patching system improvement plugin for IDA.
  Updated: 2019 09 06    Language: Python

• Debugger: Debugger plugin for IDA Pro backed by the Unicorn Engine
  Updated: 2021 07 26    Language: C++

• dec2struct: Easily setup vtables in IDA using declaration files.
  Updated: 2017 09 06    Language: Python

• deREferencing: IDA Pro plugin that implements more user-friendly register and stack views.
  Updated: 2021 05 05    Language: Python

• Describe Key: Quickly learn what a shortcut does. Describe Key is a very simple IDA Pro plugin: invoke it, press a shortcut, and instantly see what actions are associated with the shortcut. Quick and easy, call it from anywhere in IDA.
  Updated: 2022 04 08    Language: Python

• Diaphora: Diaphora (διαφορά, Greek for 'difference') is a program diffing plugin for IDA Pro, similar to Zynamics Bindiff or the FOSS counterparts DarunGrim, TurboDiff, etc... It was released during SyScan 2015.
  Updated: 2021 12 17    Language: Python

• Docker IDA: Run IDA Pro disassembler in Docker containers for automating, scaling and distributing the use of IDAPython scripts.
  Updated: 2017 11 19    Language: Python

• dotNIET: Import missing symbols (usually few thousands) which are resolved at runtime by .NET Native compiled binaries. These symbols lie in SharedLibrary.dll and are not exported by this one.
  Updated: 2021 06 30    Language: Python

• DOXBox Debugger: Eric Fry's IDA/DOSBox debugger plugin
  Updated: 2016 02 28    Language: C++

• dp701: Dark theme for IDA Pro.
  Updated: 2021 09 22

• DrGadget: This is an IDAPython plugin for the Interactive Disassembler for all your ROP experimentation needs.
  Updated: 2017 02 02    Language: Python

• DriverBuddy: DriverBuddy is an IDA Python script to assist with the reverse engineering of Windows kernel drivers.
  Updated: 2018 11 22    Language: Python

• DriverBuddyReloaded: Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks.
  Updated: 2022 04 26    Language: Python

• Drop: An experimental IDA Pro plugin capable of detecting several types of opaque predicates in obfuscated binaries. It leverages the power of the symbolic execution engine angr and its components to reason about the opaqueness of predicates based on their symbolic context.
  Updated: 2017 12 22    Language: Python

• dsync: IDAPython plugin that synchronizes decompiled and disassembled code views.
  Updated: 2021 01 20    Language: Python

• dumpDyn: Script which saves comments, names, breakpoints, functions from one execution to another, f a process allocates a dynamic memory using VirtualAlloc, HeapAlloc, new, etc. and continues execution from that address.
  Updated: 2019 02 26    Language: Python

• dwarfexport: dwarfexport is an IDA Pro plugin that allows the user to export dwarf debug information. This can then be imported in to gdb and other tools, allowing you to debug using info you have recovered in IDA even when you cannot connect the IDA debugger.
  Updated: 2020 11 18    Language: C++

• DWARF Plugin: IDADWARF is an IDA plugin that imports DWARF debugging symbols into an IDA database. Download
  Updated: 2009 11 15    Language: C++

• Dynamic Data Resolver: A plugin for IDA that aims to make the reverse-engineering of malware easier. Features: Code Flow Trace, Searchable API call logging, Searchable string logging, Resolving dynamic values and auto-commenting.
  Updated: 2020 12 17    Language: Python

• Dynamic IDA Enrichment: DIE is an IDA python plugin designed to enrich IDA`s static analysis with dynamic data. This is done using the IDA Debugger API, by placing breakpoints in key locations and saving the current system context once those breakpoints are hit.
  Updated: 2021 05 13    Language: Python

• Dynlib: This is an IDA Pro plugin to aid in reverse engineering PS4 user mode elf's by loading the PS4 specific DYNLIBDATA segment.
  Updated: 2017 12 16    Language: C++

• EFI Scripts (efitools): Some IDA scripts and tools to assist with reverse engineering EFI executables.
  Updated: 2015 07 13    Language: Python

• EFI Scripts (efitools2): Plugin for extending UEFI reverse engineering capabilities. Based on ida-efitools (EFI Scripts) with a bunch of fixes and new features.
  Updated: 2020 10 19    Language: Python

• EFI Scripts (efiutils): Some IDA scripts to assist with reverse engineering EFI executables.
  Updated: 2014 06 17    Language: Python

• efiXplorer: IDA plugin for UEFI firmware analysis and reverse engineering automation.
  Updated: 2022 05 02    Language: C++

• epanos: ElectroPaint Automatic No-source Object reaSsembler (a MIPS to C decompiler). This is a very dumb MIPS to C static translator.
  Updated: 2014 05 05    Language: Python

• EtherAnnotate: Parses the specialized instruction trace files that are generated using the EtherAnnotate Xen modification (http://github.com/inositle/etherannotate_xen). From the instruction trace, register values and code coverage of the run-time information are visualized in IDA Pro through instruction comments and line colorations.
  Updated: 2010 05 04    Language: C++

• etm_displayer: Display the result of perf Coresight ETM tracing.
  Updated: 2018 09 04    Language: Python

• Exports+: View Exports. The problem is that IDA for some reason sometimes does not show certain names in Exports or does not demangle them. This plugin fixes this problem.
  Updated: 2018 09 21    Language: Python

• Extract Macho-O: This is a very simple IDA plugin to extract all Mach-O binaries contained anywhere in the disassembly.
  Updated: 2019 05 09    Language: C++

• FCatalog: FCatalog (The functions catalog) is a mechanism for finding similarities between different binary blobs in an efficient manner. It is mostly useful for identifying a new binary blob is somewhat similar to a binary blob that have been encountered before. The client side of FCatalog is an IDA plugin that allows a group of reverse engineers to manage a pool of reversed functions. Whenever a new binary function is encountered, FCatalog can compare it to all the known and previously reversed binary functions.
  Updated: 2016 08 19    Language: Python

• Fentanyl: DAPython script that makes patching significantly easier.
  Updated: 2015 10 02    Language: Python

• Findcrypt-yara: IDA pro plugin to find crypto constants (and more)
  Updated: 2022 01 05    Language: Python

• FindFunc: Advanced Filtering/Finding of Functions. FindFunc is an IDA PRO plugin to find code functions that contain a certain assembly or byte pattern, reference a certain name or string, or conform to various other constraints.
  Updated: 2022 04 29    Language: Python

• findrpc: Ida script to extract RPC interface from binaries.
  Updated: 2022 01 25    Language: Python

• FindYara: IDA python plugin to scan binary with Yara rules.
  Updated: 2021 12 28    Language: Python

• FIRST: Function Identification and Recovery Signature Tool (FIRST) is a plugin for IDA Pro that allows users to automatically search for and apply function metadata (the function name, parameter names, parameter types, comments, etc.) submitted from different IDBs / users. This functionality is similar to IDA's Lumina feature, which was introduced in IDA 7.2, although with FIRST the function metadata server address is configurable and the FIRST server code is open source, which means the user can set up a private metadata server for internal use if desired. A community database is also maintained by Cisco Talos and available to use free-of-charge. FIRST supports IDA 6.9 SP1 and above.
  Updated: 2020 01 31    Language: Python

• flare-emu: flare-emu marries a supported binary analysis framework, such as IDA Pro or Radare2, with Unicorn’s emulation framework to provide the user with an easy to use and flexible interface for scripting emulation tasks. It is designed to handle all the housekeeping of setting up a flexible and robust emulator for its supported architectures so that you can focus on solving your code analysis problems. Currently, flare-emu supports the x86, x86_64, ARM, and ARM64 architectures.
  Updated: 2021 04 19    Language: Python

• FLARE IDA Decompiler Library (FIDL): A sane API for IDA Pro's decompiler.
  Updated: 2022 02 08    Language: Python

• FLARE Plugins: Shellcode Hashes, Struct Typer, StackStrings, MSDN Annotations, ApplyCalleType
  Updated: 2021 12 14

• FLIRTDB: A community driven collection of IDA FLIRT signature files.
  Updated: 2020 05 23

• FLS Loader: IDA Pro loader module for IFX iPhone baseband firmwares. Based on a universal scatter loader script by roxfan.
  Updated: 2012 04 19    Language: Python

• Fluorescence: Un/highlights function call instructions
  Updated: 2021 06 02    Language: Python

• FRAPL: FRAPL is a reverse engineering framework created to simplify dynamic instrumentation with Frida.
  Updated: 2016 12 26    Language: Python

• Free the debuggers: Free the ida pro debuggers for all files.
  Updated: 2015 02 07    Language: Python

• Frida: This is plugin for ida pro thar uses the Frida api. Mainly trace functions.
  Updated: 2015 04 05    Language: Python

• FRIEND: Flexible Register/Instruction Extender aNd Documentation. FRIEND is an IDA plugin created to improve disassembly and bring register/instruction documentation right into IDA View. (see also: AMIE)
  Updated: 2021 07 26    Language: C++

• Fugue FDB IDB exporter: Fugue database importer and exporter for IDA Pro.
  Updated: 2022 02 14    Language: C++

• Funcap: This script records function calls (and returns) across an executable using IDA debugger API, along with all the arguments passed. It dumps the info to a text file, and also inserts it into IDA's inline comments. This way, static analysis that usually follows the behavioral runtime analysis when analyzing malware, can be directly fed with runtime info such as decrypted strings returned in function's arguments.
  Updated: 2016 03 04    Language: Python

• FuncScanner: Collects extended function properties from IDA Pro databases. This is especially useful in reverse engineering code that comes with no or little symbolic information, as is often the case with embedded firmware.
  Updated: 2020 12 06    Language: Python

• Functions+: IDA Pro plugin to make functions tree view. Plugin parses function names and groups them by namespaces.
  Updated: 2021 04 17    Language: Python

• Function Tagger: This IDAPython script tags subroutines according to their use of imported functions
  Updated: 2021 05 26    Language: Python

• Gamecube DSP: This project adds support for the DSP present in the Gamecube and the Wii to IDA, the Interactive Disassembler [1]. This allows easy analyze of a DSP ucode, handling cross-references, control flow, and so on.
  Updated: 2014 12 13    Language: Python

• Gamecube Extension: This is a Gekko CPU Paired Single extension instructions plug-in for IDA Pro 5.2
  Updated: 2018 04 25    Language: C++

• garmin-ida-loader: IDA loader for Garmin firmwares.
  Updated: 2013 05 30    Language: C++

• gdbida: A visual bridge between a GDB session and IDA Pro's disassembler
  Updated: 2018 04 23    Language: Python

• genmc: Genmc is an IDAPython script/plugin hybrid that displays Hexrays decompiler microcode, which can help in developing microcode plugins.
  Updated: 2021 01 15    Language: Python

• Geolocator: Lookup (geolocate) IP's and http/https addresses, using google maps, and MaxMind databases.
  Updated: 2019 03 10    Language: Python

• GhIDA: GhIDA is an IDA Pro plugin that integrates the Ghidra decompiler in IDA.
  Updated: 2020 12 16    Language: Python

• GhidraDec: Ghidra Decompiler Plugin for IDA Pro.
  Updated: 2022 03 15    Language: C++

• golang_loader_assist: Making GO reversing easier in IDA Pro.
  Updated: 2020 06 22    Language: Python

• golang_struct_builder: Script that auto-generates structs and interfaces from runtime metadata found in golang binaries.
  Updated: 2021 08 22    Language: Python

• go_parser: Yet Another Golang binary parser for IDAPro. Inspired by golang_loader_assist and jeb-golang-analyzer, I wrote a more complete Go binaries parsing tool for IDAPro.
  Updated: 2021 07 29    Language: Python

• grap: Define and match graph patterns within binaries. grap takes patterns and binary files, uses a Casptone-based disassembler to obtain the control flow graphs from the binaries, then matches the patterns against them.
  Updated: 2022 03 16    Language: Python

• GraphGrabber: Grab full-resolution images of IDA graphs.
  Updated: 2017 11 20    Language: Python

• Graph Slick: Automated detection of inlined functions. It highlights similar groups of nodes and allows you to group them, simplifying complex functions. The authors provide an accompanying presentation which explains the algorithms behind the plugin and shows sample use cases.
  Updated: 2014 11 20    Language: C++

• GUID-Finder: Find GUID/UUIDs. The COM side of RE'ing (at least with "dead listing") can be pretty elusive. With this you can at least partially glean what interfaces and classes a target is using.
  Updated: 2016 01 24    Language: Python

• HashDB IDA: Malware string hash lookup plugin for IDA Pro. This plugin connects to the OALABS HashDB Lookup Service.
  Updated: 2022 03 17    Language: Python

• HeapViewer: An IDA Pro plugin to examine the heap, focused on exploit development.
  Updated: 2021 07 13    Language: Python

• HexCopy: IDA plugin for quickly copying disassembly as encoded hex bytes.
  Updated: 2021 10 11    Language: Python

• HexExt: Improve the output of the hexrays decompiler through microcode manipulation.
  Updated: 2019 08 04    Language: C++

• Hex-Rays Block Highlighter: Highlight code blocks in the Hex-Rays decompiler output. In some cases the decompilation output can be quite hairy with lots of nested blocks and it can be hard to follow where one ends and the other begins. This plugin will highlight blocks in a sticky way, allowing one to navigate within the window while keeping the block highlight around.
  Updated: 2022 04 17    Language: Python

• HexRays CodeXplorer: The Hex-Rays Decompiler plugin for better code navigation in RE process. CodeXplorer automates code REconstruction of C++ applications or modern malware like Stuxnet, Flame, Equation, Animal Farm ...
  Updated: 2022 03 09    Language: C++

• HexRaysDeob: A Hex-Rays microcode API plugin breaking an obfuscating compiler used to create an in-the-wild malware family. The plugin is fully automatic and requires no user intervention; upon installation, the decompilation listings presented to the user will be free of obfuscation.
  Updated: 2019 08 27    Language: C++

• HexRaysPyTools: Plugin assists in creation classes/structures and detection virtual tables. Best to use with Class Informer plugin, because it helps to automatically get original classes names.
  Updated: 2020 02 15    Language: Python

• hexrays_scripts: Various scripts for the Hexrays decompiler (kloppy, shuffle, arachno, IDA coffee, screenrecorder, ricky).
  Updated: 2022 04 07    Language: Python

• Hexrays Toolbox: Find code patterns within the Hexrays AST
  Updated: 2021 11 05    Language: Python

• HexRays Tools:

  • Assist in creation of new structure definitions / virtual calls detection
  • Jump directly to virtual function or structure member definition
  • Gives list of structures with given size, with given offset
  • Finds structures with same "shape" as is used.
  • convert function to __usercall or __userpurge
  • and more....
    Updated: 2016 01 26    Language: Python

• hexviewjump: IDA 7.0 plugins that helps to jump at hexview and extends JumpAsk expression.
  Updated: 2019 02 27    Language: Python

• HRDEV: This is an IDA Pro Python plugin to make Hex-Rays Decompiler output bit more attractive. HRDEV plugin retrieves standard decompiler output, parses it with Python Clang bindings, does some magic, and puts back.
  Updated: 2018 09 21    Language: Python

• HrDevHelper: HexRays decompiler plugin that visualizes the ctree of decompiled functions using IDA's graph engine.
  Updated: 2021 11 04    Language: Python

• Hyara: A plugin to create pattern-matching rules. It helps creating rules for the YARA pattern-matching tool direcly in IDA. It includes a simple detection of relocatable bytes in x86 opcodes for improved matching. It also provides a checker feature for testing the rules on the loaded binary.
  Updated: 2021 11 01    Language: Python

• IBT: IDA Pro Back Tracer - Initial project toward automatic customized protocols structure extraction.
  Updated: 2017 05 01    Language: Python

• ida2pwntools: IDA 7.0 plugins that helps to attach process created by pwntools and debug pwn.
  Updated: 2019 02 27    Language: Python

• IDA2SQL: As the name implies this plugin can be used to export information from IDA databases to SQL databases. This allows for further analysis of the collected data: statistical analysis, building graphs, finding similarities between programs, etc.
  Updated: 2012 01 10    Language: Python

• IDA 7.x VS2017 Sample Project: This is a sample Visual Studio 2017 (Community Edition) project for IDA 7.x plugins on Windows.
  Updated: 2018 05 10    Language: C++

• ida-arm-system-highlight: This script will give you the list of ARM system instructions used in your IDA database. This is useful for locating specific low-level pieces of code (setting up the MMU, caches, fault handlers, etc.).
  Updated: 2021 09 28    Language: Python

• IDA Autoruns: IDA-Autoruns is a simple plugin to make a script run automatically every time you open a specific IDB.
  Updated: 2016 02 21    Language: Python

• IDA Batch Decompile: Batch decompile multiple files and their imports with additional annotations (xref, stack var size) to a pseudocode .c file.
  Updated: 2018 07 12    Language: Python

• ida bitfields: A simple IDA Pro plugin to make bitfields and bitflags in them easier to reason about.
  Updated: 2022 04 24    Language: C++

• IDA BPF Processor: BPF Bytecode Processor for IDA (python). Supports the old BPF bytecode only (no eBPF).
  Updated: 2018 08 27    Language: Python

• IDABuddy: IDABuddy is a reverse-engineer's best friend. Designed to be everything Clippy the Office Assistant was, and more!
  Updated: 2017 09 17    Language: Python

• IDA C#: Scripting IDA with C#, download here. (All in Chinese).
  Updated: 2010 06 05

• IDA cLEMENCy Tools: Tools to work with the cLEMENCy architecture developed by LegitBS for use during the Defcon 25 Capture the Flag event.
  Updated: 2017 07 31    Language: Python

• ida-climacros: ida-climacros is a productivity plugin that allows you to define macros that will be expanded when interfacing with IDA's command line interpreter (in the output window).
  Updated: 2021 01 05    Language: C++

• ida-cmake: This is not an IDA plugin but a CMake project generator for IDA plugins development.
  Updated: 2022 02 23

• ida-cmake: CMake build scripts and a Python helper allowing compilation of C++ IDA plugins for Windows, macOS and Linux without much user effort.
  Updated: 2017 09 02

• IDA Color Schemer: tool to easily design IDA color schemes outside IDA. This will hopefully allow simplifying & automating the generation of color schemes and help create colorblind-friendly settings.
  Updated: 2019 01 05    Language: Python

• IDA Compare: IDA disassembly level diffing tool, find patches and modifications between malware variants. See mydoom A/B sample database and video trainer for usage.
  Updated: 2019 05 30    Language: C++

• idaConsonance: Consonance, a dark color scheme for IDA.
  Updated: 2013 02 19

• IDACyber: IDACyber is a plugin that visualizes an IDA database's content.
  Updated: 2021 12 17    Language: Python

• idadiff: IDAPython script to auto-rename subs using the MACHOC algorithm.
  Updated: 2017 05 17    Language: Python

• IDA EA: A set of exploitation/reversing aids for IDA. Provides a context viewer, instruction emulator, heap explorer, trace dumper, GDB integration, Styling
  Updated: 2017 11 28    Language: Python

• IDA Embed arch disasm: Allows you to disassemble x86-64 code (like inlined WOW64 one) while you using 32-bit IDA database. This would be helpfull to analyze WOW64 mode switches.
  Updated: 2021 12 27    Language: Python

• idaemu: Emulate code in IDA Pro. it is based on unicorn-engine.
  Updated: 2016 12 15    Language: Python

• IDA-EVM: IDA Processor Module for the Ethereum Virtual Machine (EVM).
  Updated: 2018 04 11    Language: Python

• IDA Extrapass: An IDA Pro Win32 target clean up plug-in by Sirmabus. It does essentially four cleaning/fixing steps: Convert stray code section values to "unknown", fix missing "align" blocks, fix missing code bytes, and locate and fix missing/undefined functions.
  Updated: 2018 07 13    Language: C++

• IDA Eye: Plugin that enables you to perform different operations at the mnemonic level, independent of any particular processor type. These operations are facilitated through a parameterized template, which include the capabilities to de/highlight instructions, gather statistical information about the frequency of each instruction, and search for sequences of mnemonics, among other features.
  Updated: 2018 03 10    Language: C++

• IDA-For-Delphi: IDA Python Script to Get All function names from Event Constructor (VCL).
  Updated: 2019 09 20    Language: Python

• IDAFrida: IDA Frida Plugin for tracing something interesting. Plugin to generate FRIDA script.
  Updated: 2022 03 28    Language: Python

• IDAFuzzy: IDAFuzzy is fuzzy searching tool for IDA Pro. This tool helps you to find command/function/struct and so on. (a la Mac Spotlight).
  Updated: 2019 12 16    Language: Python

• ida_game_elf_loaders (gel): A collection of IDA loaders for various game console ELF's: PS3, PSVita, WiiU.
  Updated: 2019 10 03    Language: C++

• IDA GCC RTTI: Class informer plugin for IDA which supports parsing GCC RTTI.
  Updated: 2018 03 04    Language: C++

• ida-genesis: Suite of IDA scripts for SEGA Genesis ROM hacking. ROM Loader, Branch Table Enumeration.
  Updated: 2020 02 16    Language: Python

• IDAGolangHelper: Set of IDA Pro scripts for parsing GoLang types information stored in compiled binary.
  Updated: 2021 06 15    Language: Python

• idahunt: idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro. It is command line tool to analyse all executable files recursively from a given folder. It executes IDA in the background so you don't have to open manually each file. It supports executing external IDA Python scripts.
  Updated: 2022 01 04    Language: Python

• IDA iBoot Loader: IDA loader for Apple's 64 bits iBoot, SecureROM and AVPBooter.
  Updated: 2021 12 19    Language: Python

• idaidle: idaidle is a plugin for the commercial IDA Pro disassembler that warns users if they leave their instance idling for too long. After a predetermined amount of idle time, the plugin first warns and later then saves the current disassemlby database and closes IDA.
  Updated: 2021 02 17    Language: C++

• IDA Images: Image preview plugin for IDA disassembler.
  Updated: 2020 11 07    Language: Python

• IDA IPython: This is a plugin to embed an IPython kernel in IDA Pro. The Python ecosystem has amazing libraries (and communities) for scientific computing. IPython itself is great for exploratory data analysis. Using tools such as the IPython notebook make it easy to share code and explanations with rich media. IPython makes using IDAPython and interacting with IDA programmatically really fun and easy.
  Updated: 2017 08 05    Language: C++

• ida-kallsyms: IDA script for parsing kallsyms.
  Updated: 2020 11 28    Language: Python

• IDAKern: Raw IDA Kernel API for IDAPython: An IDAPython wrapper for IDA Pro's kernel dll.
  Updated: 2022 04 10    Language: Python

• IDA Key Checker: IDA Pro key checker tool, check IDA keys from the command line.
  Updated: 2021 09 22    Language: C++

• idalink: Some glue facilitating remote use of IDA Python API. idalink works by spawning an IDA CLI session in the background (in a detached screen session), and connects to it using RPyC.
  Updated: 2020 07 14    Language: Python

• IDAMagicStrings: An IDA Python plugin to extract information from string constants. The current version of the plugin is able to:

  • Display functions to source files relationships (in a tree and in a plain list, a chooser in IDA language).
  • Display guessed function names for functions.
  • Rename functions according to the source code file their belong + address (for example, memory_mgmt_0x401050).
  • Rename functions according to the guessed function name.
    Updated: 2019 11 08    Language: Python

• idamagnum: A plugin for integrating MagnumDB requests within IDA. MagNumDB is a database that contains about 380,000 items. These items are constants, names, values all extracted from more than 6,000 header files (.h, .hxx, .hpp, .idl, etc.) provided by standard Windows and Visual Studio SDKs and WDKs.
  Updated: 2020 04 10    Language: Python

• ida_medigate: Medigate plugin for c++ reverse engineering and other utils. Two parts:

  • Implementation of C++ classes and polymorphism over IDA
  • A RTTI parser which rebuilds the classes hierarchy.
    Updated: 2021 02 15    Language: Python

• IDAMetrics: IDA plugins for static software complexity metrics collection. Collects static software complexity metrics for binary executables of x86 architecture.
  Updated: 2018 01 04    Language: Python

• IDA Migrator: IDA Migrator plugin makes the job of migrating symbols and type informations from one IDA database instance to another. It will help migrating function names, structures and enums. This comes in handy when:

  • Moving to a newer version of IDA that does better analysis and you don't want to change in the new instance type information or variable names of the decompiled functions.
  • The current idb instance fails to decompile a function or the decompilation looks wrong in comparison to another idb instance of the same binary.
  • Experimenting on another idb instance before making major changes on the current instance.
  • A lightweight easy way of creating small backups of the current work.
  • For w/e reason, the current idb instance you're working on gets corrupted.
    Updated: 2021 05 28    Language: Python

• IDA-minsc: A plugin that assists a user with scripting the IDAPython plugin that is bundled with the disassembler. This plugin groups the different aspects of the IDAPython API into a simpler format which allows a reverse engineer to script different aspects of their work with very little investment.
  Updated: 2022 05 03    Language: Python

• ida-netnode: Humane API for storing and accessing persistent data in IDA Pro databases.
  Updated: 2020 06 29    Language: Python

• IDAngr: Use angr in the ida debugger generating a state from the current debug session.
  Updated: 2020 07 22    Language: Python

• IDA - Nightfall: A dark color theme for IDA Pro
  Updated: 2019 06 25    Language: Python

• IDAObjcTypes: A collection of (public and private) types and functions definitions useful for Objective-C binaries analysis.
  Updated: 2022 03 29    Language: Python

• IDA Patcher: IDA Patcher is a plugin for Hex-Ray's IDA Pro disassembler designed to enhance IDA's ability to patch binary files and memory.
  Updated: 2014 09 23    Language: Python

• IDA Patchwork: Stitching against malware families with IDA Pro (tool for the talk at Spring9, https://spring2014.gdata.de/spring2014/programm.html). In essence, I use a somewhat fixed / refurbished version of PyEmu along IDA to demonstrate deobfuscation of the different patterns found in the malware family Nymaim.
  Updated: 2014 11 04    Language: Python

• IDA PDB Loader (IPL): Simple plugin to load PDB symbols. The problem is that sometimes IDA crashes for me when trying to load symbols, so I came up with this quick and dirty alternative.
  Updated: 2018 09 21    Language: Python

• IDAPerl: Adds perl scripting support to ida.
  Updated: 2016 07 24    Language: C++

• IDA Plugin Loader: Random IDA scripts, plugins, example code (some of it may be old and not working anymore).
  Updated: 2019 10 27    Language: Python

• idaplugins: Random IDA scripts, plugins, example code (some of it may be old and not working anymore).
  Updated: 2017 02 05    Language: C++

• idaplugins: Plugins for IDA: Plugin Proxy, Function Strings, LCA Graph, Autoenum, Autostruct, Function Flow, Quick Copy.
  Updated: 2015 05 31    Language: Python

• idapm: idapm is IDA Plugin Manager. It works perfectly on macOS, it probably works on Windows and Linux.
  Updated: 2020 09 05    Language: Python

• idapro_m6502: Extends existing support in IDA Pro for the m6502 processor family by adding gdb XML support, and step-over and type information support. Aim was to debug NES roms.
  Updated: 2020 11 10    Language: Python

• idapro_m68k: Extends existing support in IDA for the Motorola m68k processor family by adding gdb step-over and type information support. Enable type information support so you can press "y" on functions and have the parameters propagate inside and back out of the function.
  Updated: 2019 07 14    Language: Python

• IDAPyHelper: IDAPyHelper is a script for the Interactive Disassembler that helps writing IDAPython scripts and plugins.
  Updated: 2019 11 23    Language: Python

• IDA Python Embedded Toolkit: IDAPython scripts for automating analysis of firmware of embedded devices.
  Updated: 2019 08 14    Language: Python

• IDARay: IDARay is an IDA Pro plugin that matches the database against multiple YARA files. Maybe your rules are scattered over multiple YARA files or you simply want to match against as much rules as possible, IDARay is here to help.
  Updated: 2018 11 16    Language: Python

• IdaRef: IDA Pro Full Instruction Reference Plugin - It's like auto-comments but useful.
  Updated: 2021 10 20    Language: Python

• IDA Rest: A simple REST-like API for basic interoperability with IDA Pro.
  Updated: 2015 03 21    Language: Python

• IDArling: IDArling is a collaborative reverse engineering plugin for IDA Pro and Hex-Rays. It allows to synchronize in real-time the changes made to a database by multiple users, by connecting together different instances of IDA Pro.
  Updated: 2021 02 17    Language: Python

• IDArling (Fork): IDArling is a collaborative reverse engineering plugin for IDA Pro and Hex-Rays. This is an actively maintained fork of the now-abandoned IDARling above.
  Updated: 2022 01 10    Language: Python

• Idarop: ROP database plugin for IDA: list and store all the ROP gadgets presents within the opened binary. (inspired from idasploiter).
  Updated: 2018 06 05    Language: Python

• ida-rpc: Discord rich presence plugin for IDA Pro 7.0
  Updated: 2019 04 26    Language: C++

• IDA Scope: IDAscope is an IDA Pro extension with the goal to ease the task of (malware) reverse engineering with a current focus on x86 Windows. It consists of multiple tabs, containing functionality to achieve different goals such as fast identification of semantically interesting locations in the analysis target, seamless access to MSDN documentation of Windows API, and finding of potential crypto/compression algorithms.
  Updated: 2020 08 13    Language: Python

• idascripts: IDC and idapython script collection. enumerators.py contains several iterators.
  Updated: 2019 09 11    Language: Python

• ida-scripts: Misc IDA Pro scripts: cyclomatic_complexity, go_stripped_helper.
  Updated: 2016 10 17    Language: Python

• ida-scripts (sam-b): Dumping ground for whatever IDA Pro scripts I write: call_graph, export2neo4j, find_device_name, mem_complexity, most_refs.
  Updated: 2016 10 09    Language: Python

• ida-settings: Fetch and set configuration values from IDAPython scripts.
  Updated: 2020 09 09    Language: Python

• idasetup: Custom setup.py file for IDA plugins.
  Updated: 2017 10 28    Language: Python

• IDAShell: IDAShell is a shell extension for launching IDA from the context menu of executables (Windows).
  Updated: 2021 07 29    Language: C++

• IDA Signature Matching Tool: Tool for searching signatures inside files, extremely useful as help in reversing jobs like figuring or having an initial idea of what encryption/compression algorithm is used for a proprietary protocol or file. It can recognize tons of compression, multimedia and encryption algorithms and many other things like known strings and anti-debugging code which can be also manually added since it's all based on a text signature file read at run-time and easy to modify.
  Updated: 2018 07 13    Language: C++

• idasix: IDAPython compatibility library. idasix aims to create a smooth ida development process and allow a single codebase to function with multiple IDA/IDAPython versions.
  Updated: 2018 08 02    Language: Python

• IDA Skins: Plugin providing advanced skinning support for the Qt version of IDA Pro utilizing Qt stylesheets, similar to CSS.
  Updated: 2019 06 15    Language: Python

• IDA Sploiter: IDA Sploiter is a plugin for Hex-Ray's IDA Pro disassembler designed to enhance IDA's capabilities as an exploit development and vulnerability research tool. Some of the plugin's features include a powerful ROP gadgets search engine, semantic gadget analysis and filtering, interactive ROP chain builder, stack pivot analysis, writable function pointer search, cyclic memory pattern generation and offset analysis, detection of bad characters and memory holes, and many others.
  Updated: 2019 05 13    Language: Python

• IDA Stealth: IDAStealth is a plugin which aims to hide the IDA debugger from most common anti-debugging techniques. The plugin is composed of two files, the plugin itself and a dll which is injected into the debuggee as soon as the debugger attaches to the process. The injected dll actually implements most of the stealth techniques either by hooking system calls or by patching some flags in the remote process.
  Updated: 2014 09 14    Language: C++

• IDA StrikeOut: IDA strike-out: A Hex-Rays decompiler plugin to patch the Ctree (e.g. remove statements).
  Updated: 2021 12 27    Language: C++

• IDA StringCluster: This plugin extends IDA Pro's capabilities to display strings within the binary by clustering found strings on a per-function basis.
  Updated: 2018 03 14    Language: Python

• IDA-String-Reference-Locator: Finds all first occurring string references near another reference.
  Updated: 2021 12 16    Language: C++

• IDA Taco: Bring Cuckoo Sandbox-generated output into IDA Pro to assist in reverse engineering malware as well as combining some commonly used tools into one UI.
  Updated: 2016 06 14    Language: Python

• IDATag: Tag explorer for IDA Pro. The plugin leverages IDA as a platform to map, explore, and visualize collected tags. Tags can come from multiple sources such as IDA itself or different other clients.
  Updated: 2019 07 19    Language: C++

• IDA Toolbag: The IDA Toolbag plugin provides many handy features, such as:

  • A 'History' view, that displays functions in the disassembly that you have decided are important, and the relationships between them.
  • A code path-searching tool, that lets you find what functions (or blocks) are forming a path between two locations.
  • Manage and run your IDC/Python scripts
  • Something that's also of considerable importance is that the IDA Toolbag lets you collaborate with other IDA users: one can publish his 'History', or import another user's history & even merge them!
  • See the official documentation for an extensive feature list.
    Updated: 2015 01 30    Language: Python

• IDAtropy: IDAtropy is a plugin for Hex-Ray's IDA Pro designed to generate charts of entropy and histograms using the power of idapython and matplotlib.
  Updated: 2021 04 16    Language: Python

• IdaVSHelp: IDAPython plugin to integrate Visual Studio Help Viewer in IDA Pro >= 6.8
  Updated: 2017 05 13    Language: Python

• idawasm: These IDA Pro plugins add support for loading and disassembling WebAssembly modules.

  • control flow reconstruction and graph mode
  • code and data cross references
  • globals, function parameters, local variables, etc. can be renamed
  • auto-comment hint support
    Updated: 2018 10 04    Language: Python

• idawilli: IDA Pro resources, scripts, and configurations.
  Updated: 2022 01 21    Language: Python

• idax: idax is a set of C++ extensions for the IDASDK. These extensions are a work in progress and are not meant to be used in production code yet. As of now, only my personal IDA plugins use idax.
  Updated: 2021 12 27    Language: C++

• IDA x64dbgExport: A binary x64dbg debugger export plugin for IDA Pro. A binary plugin version of mrexodia's official Python version (x64dbgida) but only with an export, no 'import' option.
  Updated: 2022 01 15    Language: C++

• idaxex: Xbox360/Xenon loader plugin for IDA 7.2+, supporting most known Xbox360/Xenon .XEX executable file formats.
  Updated: 2022 02 18    Language: C++

• IDA Xtensa: This is a processor plugin for IDA, to support the Xtensa core found in Espressif ESP8266. It does not support other configurations of the Xtensa architecture, but that is probably (hopefully) easy to implement.
  Updated: 2019 08 20    Language: Python

• idb2pat: IDB to Pat, fixed to work with IDA 6.2. Create patterns for IDA objects.
  Updated: 2011 10 08    Language: C++

• idbutil: IDBTOOL - Library and tool for reading IDApro databases. (See Python version 'pyidbutil')
  Updated: 2020 11 27    Language: C++

• idcinternals: IDA plugin investigating the internal representation of IDC scripts
  Updated: 2020 11 27    Language: C++

• idenLib: Library Function Identification plugin for IDA Pro.
  Updated: 2019 02 26    Language: Python

• IFL: Interactive Functions List is an user-friendly way to navigate between functions and their references.
  Updated: 2022 01 20    Language: Python

• ifred: IDA command palette & more (Ctrl+Shift+P, Ctrl+P).
  Updated: 2022 03 08    Language: C++

• IPyIDA: PyIDA is a python-only solution to use a IPython console in the context of IDA Pro. It spawns an IPython kernel that you can connect to with ipython console --existing in your shell or by opening a QT Console window in IDA Pro with <Shift-.>
  Updated: 2022 04 23    Language: Python

• JNIDA: Helps to rename JNI native methods and restore their C signatures
  Updated: 2019 11 18    Language: Python

• Kam1n0: Kam1n0 is a scalable system that supports assembly code clone search. It allows a user to first index a (large) collection of binaries, and then search for the code clones of a given target function or binary file. Kam1n0 tries to solve the efficient subgraph search problem (i.e. graph isomorphism problem) for assembly functions.
  Updated: 2022 02 13    Language: Python

• Karta: "Karta" (Russian for "Map") is a source code assisted fast binary matching plugin for IDA. Karta identifies and matches open-sourced libraries in a given binary using a unique technique that enables it to support huge binaries (> 200,000 functions) with almost no impact on the overall performance.
  Updated: 2022 03 15    Language: Python

• Keypatch: A multi-architeture assembler for IDA. Keypatch allows you enter assembly instructions to directly patch the binary under analysis. Powered by Keystone engine.
  Updated: 2021 02 18    Language: Python

• Labeless: Labeless is a plugin system for dynamic, seamless and realtime synchronization between IDA Database and Olly. Labels, function names and global variables synchronization is supported. Labeless provides easy to use dynamic dumping tool, which supports automatic on-the-fly imports fixing as well as convenient tool for IDA-Olly Python scripting synergy.
  Updated: 2022 03 25    Language: C++

• LazyIDA: LazyIDA lets you perform many tasks simply and quickly (e.g., remove function return type in Hex-Rays, convert data into different formats, scan for format string vulnerabilities and a variety of shortcuts)
  Updated: 2022 02 25    Language: Python

• Lighthouse: Lighthouse is a Code Coverage Plugin for IDA Pro. The plugin leverages IDA as a platform to map, explore, and visualize externally collected code coverage data when symbols or source may not be available for a given binary.
  Updated: 2022 02 17    Language: Python

• LLVMAnalyzer: Based on a retdec open source decompiler tool and on the LLVM compiler architecture, the author integrates the klee symbolic execution tool, and dynamically simulates the decompiled llvm ir (intermediate instruction set) operation through the Symbolic Execution engine. (Chinese).
  Updated: 2022 04 06    Language: C++

• LoadProcConfig: LoadProcConfig is an IDA plugin to load processor configuration files.
  Updated: 2017 09 21    Language: C++

• Localxrefs: Finds references to any selected text from within the current function.
  Updated: 2021 06 02    Language: Python

• Lucid: Lucid is a developer-oriented IDA Pro plugin for exploring the Hex-Rays microcode. It was designed to provide a seamless, interactive experience for studying microcode transformations in the decompiler pipeline.
  Updated: 2020 09 15    Language: Python

• Lumen: A private Lumina server for IDA Pro written in Rust.
  Updated: 2022 01 21    Language: rs

• MadNES: This plugin exports IDA names to FCEUXD SP symbols. These can be loaded by FCEUXD SP to allow symbolic debugging.
  Updated: 2012 09 12    Language: C++

• MazeWalker: Toolkit for enriching and speeding up static malware analysis. MazeWalker’s goal is to reduce malware analysis time by automating runtime data collection and better visualization eventually helping a researcher to concentrate on static analysis and less on its dynamic part.
  Updated: 2022 01 16    Language: Python

• Memory Loader: IDA loader that allows loading malicious buffers to IDA without writing them to the disk.

  • UrlLoader - loads files from a URL.
  • MemZipLoader - loads files to encrypted / plain zip file.
  • So far only windows supported.
    Updated: 2021 03 26    Language: C++

• MicroAVX: An AVX Lifter for the Hex-Rays Decompiler. It adds partial support for a number of common instructions from Intel's Advanced Vector Extensions (AVX). This plugin demonstrates how the Hex-Rays microcode can be used to lift and decompile new or previously unsupported instructions.
  Updated: 2020 07 22    Language: Python

• mIDA: MIDL Decompiler for IDA. Extracts RPC interfaces and recreates the associated IDL file. mIDA supports inline, interpreted and fully interpreted server stubs.
  Updated: 2018 07 05    Language: C++

• MILF: An IDA Pro swiss army knife (with a sexy name!) MILF is an IDA Pro plugin which automates several typical tasks in a RE session.
  Updated: 2013 03 15    Language: Python

• mipsAudit: Static scan script, assembly audit helper script (IDA MIPS静态扫描脚本，汇编审计辅助脚本).
  Updated: 2021 11 25    Language: Python

• mipslocalvars: Names stack variables used by the compiler for storing registers on the stack, simplifying stack data analysis (MIPS only).
  Updated: 2021 06 02    Language: Python

• mipsrop:

  • Allows you to search for suitable ROP gadgets in MIPS executable code
  • Built-in methods to search for common ROP gadgets.
    Updated: 2021 06 02    Language: Python

• mkYARA IDA Plugin: IDA plugin to easily create YARA signatures with mkYARA.
  Updated: 2019 12 16    Language: Python

• MrsPicky: An IDAPython decompiler script that helps auditing calls to the memcpy() and memmove() functions.
  Updated: 2019 12 18    Language: Python

• msdnGrab: Allows a user to grab documentation from online MSDN for a given function name in IDA, and import the documentation as a repeatable comment for that function. Handles queries for the Win32 API and C/C++.
  Updated: 2012 07 22    Language: Python

• MSDN Helper: This tool will help you to get to Offline MSDN help while using IDA Pro.
  Updated: 2016 09 05

• msp430emu: An msp430 emulator plugin for Ida Pro.
  Updated: 2019 03 22    Language: C++

• MyNav: MyNav is a plugin for IDA Pro to help reverse engineers in the most typical task like discovering what functions are responsible of some specifical tasks, finding paths between "interesting" functions and data entry points.
  Updated: 2010 09 03    Language: C++

• nao: nao (no-meaning assembly omitter) is dead code eliminator plugin for IDA pro.
  Updated: 2021 05 05    Language: Python

• NDSLdr: Nintendo DS ROM loader module for IDA Pro.
  Updated: 2017 02 05    Language: C++

• NECromancer: IDA Pro V850 Processor Module Extension.
  Updated: 2018 05 08    Language: Python

• nesdbg: Failed attempt in creating an IDA Pro debugger plugin for NES ROMs
  Updated: 2018 12 18    Language: C++

• NES Loader: Nintendo Entertainment System (NES) ROM loader module for IDA Pro.
  Updated: 2020 02 26    Language: C++

• NES Loader (py): Nintendo Entertainment System (NES) ROM loader module for IDA Pro (Python port for IDA 7.x).
  Updated: 2021 07 15    Language: Python

• NIOS2: An IDA Pro processor module for Altera Nios II Classic/Gen2 microprocessor architecture.
  Updated: 2018 09 24    Language: Python

• nmips: IDA plugin to enable nanoMIPS processor support. This is not limited to simple disassembly, but fully supports decompilation and even fixes up the stack in certain functions using custom microcode optimizers. It also supports relocations and automatic ELF detection (even though the UI might not show it, it kinda works). Debugging also works thanks to GDB and it also does some other stuff, such as automatic switch detections.
  Updated: 2021 09 15    Language: Python

• NoVmpy: Proof of Concept, IDA integration of a static devirtualizer for VMProtect x64 3.x. powered by VTIL.
  Updated: 2022 04 15    Language: Python

• NSIS Reversing Suite: NRS is a set of Python libraries used to unpack and analysis NSIS installer's data. It also feature an IDA plugin used to disassembly the NSIS Script of an installer.
  Updated: 2018 05 19    Language: Python

• obfDetect: A plugin to automatically detect obfuscated code and state machines in binaries.
  Updated: 2022 04 29    Language: Python

• Obpo: Obfuscated Binary Pseudocode Optimizer: Obpo is a microcode-based hex-rays optimizer, uses techniques such as static-program-analysis, dataflow-tracking, concolic-execution to rebuild the obfuscated control flow (such as: OLLVM).
  Updated: 2022 05 01    Language: Python

• oldidc: IDA Python's idc.py <= 7.3 compatibility module.
  Updated: 2019 10 11    Language: Python

• Optimice: This plugin enables you to remove some common obfuscations and rewrite code to a new segment. Currently supported optimizations are: Dead code removal, JMP merging, JCC opaque predicate removal, Pattern based deobfuscations
  Updated: 2012 08 05    Language: Python

• Oregami: A plugin analyzing the current function to find the usage frame of registers. Oregami eases the work when tracking the use of a register within a function, by limiting the search to occurrences related to the one currently highlighted instead of the whole function. It also allows localized renaming of the registers, and batch type giving to multiple opcodes using the registers.
  Updated: 2020 04 06    Language: Python

• Patching: Interactive Binary Patching for IDA Pro. This project extends the popular IDA Pro disassembler to create a more robust interactive binary patching workflow designed for rapid iteration.
  Updated: 2022 02 10    Language: Python

• Pigaios: Pigaios ('πηγαίος', Greek for 'source' as in 'source code') is a tool for diffing/matching source codes directly against binaries.
  Updated: 2018 12 17    Language: Python

• Plus22: Plus22 transforms x86_64 executables to be processed with 32-bit version of Hex-Rays Decompiler.
  Updated: 2015 01 11    Language: PHP

• Plympton: A gem to read program disassembly from a YAML dump. The YAML dump is generated from an IDA Pro python script. This script is included along with this Gem (func.py)
  Updated: 2014 11 25    Language: Python

• Pomidor: IDA Pomidor is a plugin for Hex-Ray's IDA Pro disassembler that will help you retain concentration and productivity during long reversing sessions by encouraging you to take breaks.
  Updated: 2014 09 23    Language: Python

• Ponce: Taint analysis and symbolic execution over binaries in an easy and intuitive fashion.
  Updated: 2022 04 25    Language: C++

• Prefix: Prefix is a small function prefixing plugin for IDA Pro. The plugin augments IDA's function renaming capabilities by adding a handful of convenient prefixing actions to relevant right click menus.
  Updated: 2020 04 24    Language: Python

• Processor changer: Change processor without restarting IDA.
  Updated: 2014 08 11    Language: Python

• PSIDA: PSIDA is a collection of useful Python scripts for IDA. At this point, PSIDA focuses on collaborative reverse engineering in two models.
  Updated: 2018 08 03    Language: Python

• pwndbg: GDB plug-in that makes debugging with GDB suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. NOTE: IDA integration through small XMLRPC server.
  Updated: 2022 04 28    Language: Python

• pyhexraysdeob: A port of Rolf Rolles' HexRaysDeob to Python.
  Updated: 2019 10 15    Language: Python

• pyidbutil: IDBTOOL - Library and tool for reading IDApro databases. (See C++ version 'idbutil').
  Updated: 2022 05 01    Language: Python

• pytest-idapro: A pytest module for The Interactive Disassembler and IDAPython; Record and Replay IDAPython API, execute inside IDA or use mockups of IDAPython API.
  Updated: 2018 11 03    Language: Python

• Python Editor: Python editor based IDA Pro. The plugin helps python devs with scripting and running python scripts, and creating them. IT have many functions, code recognition and more.
  Updated: 2020 12 25    Language: Python

• python-idb: not an IDA Pro plugin but allows to open IDA databases (*.idb and *.i64) and run a simple subset of IDAPython API on top of them, without the IDA Pro itself.
  Updated: 2021 08 06    Language: Python

• qb-sync: qb-sync is an open source tool to add some helpful glue between IDA Pro and Windbg. Its core feature is to dynamically synchronize IDA's graph windows with Windbg's position.
  Updated: 2015 07 13    Language: Python

• QScripts: An IDA scripting productivity plugin. With this plugin, you will be able to easily write and test scripts using your favorite editor. ida-qscripts will automatically detect changes to your script or one of its dependencies and automatically reload them and re-execute your script.
  Updated: 2022 04 20    Language: C++

• Qualcomm Loader: IDA loader plugin for Qualcomm Bootloader Stages
  Updated: 2014 01 23    Language: C++

• Rebased Comment: Rebase comments when you rebase your IDA database, by searching for hexadecimal numbers that are within range of your program's segments, and fixing your comments after every rebase.
  Updated: 2020 04 06    Language: Python

• Recompiler: IDA recompiler, no docs no help.
  Updated: 2014 12 08    Language: Python

• RECON2017: RECON 2017 IDA skin & color scheme
  Updated: 2017 06 16    Language: Python

• Reef: IDAPython plugin for finding Xrefs from a function.
  Updated: 2016 07 14    Language: Python

• RefHUnter: User-friendly reference finder in IDA. RefHunter provides a summary of references for a function, which includes more information than the built-in “Function calls” widget.
  Updated: 2021 10 01    Language: Python

• REmatch: REmatch, a complete binary diffing framework that works by revealing and identifying previously reverse engineered similar functions and migrating documentation and annotations to current IDB.
  Updated: 2018 11 28    Language: Python

• REobjc: REobjc is an IDAPython module designed to make proper cross references between calling functions and called functions in Objective-C methods. The current form of the module supports X64, and will be updated to also support ARM in the future.
  Updated: 2018 04 26    Language: Python

• REProgram: A way of making almost-arbitrary changes to an executable when run under a debugger -- even changes that don't fit.
  Updated: 2011 12 27    Language: C++

• resourcer: PE file resource enumeration plugin for IDA.
  Updated: 2019 06 19    Language: C++

• retdec: IDA plugin for retdec - a retargetable machine-code decompiler based on LLVM.
  Updated: 2020 08 18    Language: C++

• ret-sync: ret-sync stands for Reverse-Engineering Tools synchronization. It's a set of plugins that help to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA disassembler. The underlying idea is simple: take the best from both worlds (static and dynamic analysis).
  Updated: 2022 05 01    Language: Python

• REtypedef: REtypedef is an IDA PRO plugin that allows defining custom substitutions for function names. It comes with a default ruleset providing substitutions for many common STL types.
  Updated: 2015 01 03    Language: C++

• rizzo: Identifies and re-names functions between two or more IDBs based on:

  • Formal signatures (i.e., exact function signatures)
  • References to unique string
  • References to unique constants
  • Fuzzy signatures (i.e., similar function signatures)
  • Call graphs (e.g., identification by association)
    Updated: 2021 06 02    Language: Python

• RTTI Parser: IDA script to parse RTTI information in executable.
  Updated: 2022 04 28    Language: Python

• Samsung S4 Rom Loader: IDA Pro Loader Plugin for Samsung Galaxy S4 ROMs

• Sark: Sark, (named after the notorious Tron villain,) is an object-oriented scripting layer written on top of IDAPython. Sark is easy to use and provides tools for writing advanced scripts and plugins.
  Updated: 2022 03 18    Language: Python

• ScatterBee_Analysis: IDA scripts to aid analysis of files obfuscated with ScatterBee.
  Updated: 2021 12 08    Language: Python

• ScratchABit: ScratchABit is an interactive incremental disassembler with data/control flow analysis capabilities. ScratchABit is dedicated to the efforts of the OpenSource reverse engineering community (reverse engineering to produce OpenSource drivers/firmware for hardware not properly supported by vendors).
  Updated: 2020 11 25

• Screen recorder: IDA Pro Qt Plugin for recording reversing sessions.
  Updated: 2016 07 27    Language: Python

• Sega Genesis/Megadrive Tools 2: Special IDA Pro tools for the Sega Genesis/Megadrive romhackers. Updated to at least IDA 7.5
  Updated: 2021 06 25    Language: C++

• ShannonRE: Helpful scripts for various tasks performed during reverse engineering the Shannon Baseband with the goal to exploit the Samsung Galaxy S6.
  Updated: 2016 08 02    Language: Python

• Sig Maker: Can create sigs automatically and has a wide variety of functions.
  Updated: 2021 07 28    Language: C++

• SigMakerEx: Enhanced IDA Pro signature generator plugin.
  Updated: 2022 02 16    Language: C++

• SimplifyGraph: An IDA Pro plugin to assist with complex graphs.
  Updated: 2018 01 29    Language: C++

• Simulator: IDASimulator is a plugin that extends IDA's conditional breakpoint support, making it easy to augment / replace complex executable code inside a debugged process with Python code.
  Updated: 2014 09 02    Language: Python

• Sk3wlDbg: Debugger plugin for IDA Pro. Front end for using the Unicorn Engine to emulate machine code that you are viewing with IDA.
  Updated: 2021 07 26    Language: C++

• SmartJump: IDA Pro plugin to enhance the JumpAsk 'g' keyboard shortcut.
  Updated: 2020 09 14    Language: Python

• Snippet Detector: Snippet Detector is an IDA Python scripts project used to detect snippets from 32bit disassembled files. snippet is the word used to identify a generic sequence of instructions (at the moment a snippet is indeed a defined function). The aim of the tool is to collect many disassembled snippets inside a database for the detection process.
  Updated: 2015 04 24    Language: Python

• Snowman Decompiler: Snowman is a native code to C/C++ decompiler. Standalone and IDA Plugin. Source Code
  Updated: 2021 06 21    Language: C++

• Splode: Augmenting Static Reverse Engineering with Dynamic Analysis and Instrumentation
  Updated: 2014 10 10    Language: C++

• spu3dbg: Ida Pro debugger module for the anergistic SPU emulator.
  Updated: 2016 03 28    Language: C++

• Stadeo: Stadeo is a set of tools primarily developed to facilitate analysis of Stantinko, which is a botnet performing click fraud, ad injection, social network fraud, password stealing attacks and cryptomining, using IDA.
  Updated: 2021 11 08    Language: Python

• Stingray: Stingray is an IDAPython plugin for finding function strings. The search is from the current position onwards in the current function. It can do it recursively also with configurable search depth. The results order is the natural order of strings in the BFS search graph.
  Updated: 2021 03 19    Language: Python

• Structure Dump: StructDump is an IDA plugin, allowing you to export IDA types into high-level language definitions. Currently, C++ is supported.
  Updated: 2007 04 05    Language: C++

• Styler: Small Plugin to change the style of Ida Pro.
  Updated: 2014 07 25    Language: Python

• SusanRTTI: Another RTTI Parsing IDA plugin (GCC/MSVC).
  Updated: 2020 11 02    Language: Python

• Swift Demangle: Demangle Swift function names. It currently only works for ELF files.
  Updated: 2016 04 23    Language: Python

• syms2elf: A plugin for IDA Pro and radare2 to export the symbols recognized to the ELF symbol table.
  Updated: 2021 11 17    Language: Python

• SyncReven: Reven integration plugin: synchronize the Axion current analysis window with some code opened in IDA.
  Updated: 2021 09 15    Language: Python

• Synergy: A combination of an IDAPython Plugin and a control version system that result in a new reverse engineering collaborative addon for IDA Pro. By http://cubicalabs.com/
  Updated: 2015 01 28    Language: Python

• Tarkus: Tarkus is a plugin manager for IDA Pro, modelled after Python's pip.
  Updated: 2015 08 13    Language: Python

• TurboDiff: Turbodiff is a binary diffing tool developed as an IDA plugin. It discovers and analyzes differences between the functions of two binaries.
  Updated: 2011 12 13    Language: C++

• UEFI_RETool: IDA Plugin for UEFI firmware analysis. This plugin allows you to automatically analyse the input UEFI images, as well as search for dependencies between UEFI images in firmware.
  Updated: 2021 08 03    Language: Python

• uEmu: uEmu is a tiny cute emulator plugin for IDA based on unicorn engine. Supports following architectures out of the box: x86, x64, ARM, ARM64, MIPS, MIPS64
  Updated: 2021 10 13    Language: Python

• unity_metadata_loader: Load strings and method/class names in global-metadata.dat to IDA.
  Updated: 2018 07 18    Language: Python

• Virtuailor: Virtuailor is an IDAPython tool that reconstructs vtables for C++ code written for intel architechture and both 32bit and 64bit code.
  Updated: 2020 06 06    Language: Python

• VirusBattle: The plugin is an integration of Virus Battle API to the well known IDA Disassembler. Virusbattle is a web service that analyses malware and other binaries with a variety of advanced static and dynamic analyses.
  Updated: 2015 05 26    Language: Python

• VMAttack: Static and dynamic virtualization-based packed analysis and deobfuscation.
  Updated: 2017 11 30    Language: Python

• Void: A 'No Operation' Generator. Creates NOP'd areas though simple convenient actions to relevant right click menus.
  Updated: 2022 04 08    Language: Python

• VTBL: VTBL is an IDA script which identifies all the virtual tables found in any module of a native process. The virtual tables can be related to a COM or a C++ class.
  Updated: 2013 03 27    Language: C++

• VT-IDA Plugin: This is the official VirusTotal plugin for Hex-Rays IDA Pro. This plugin integrates functionality from VirusTotal web services into the IDA Pro's user interface.
  Updated: 2020 10 05    Language: Python

• VulFi: The VulFi (Vulnerability Finder) tool is a plugin to IDA Pro which can be used to assist during bug hunting in binaries. Its main objective is to provide a single view with all cross-references to the most interesting functions (such as strcpy, sprintf, system, etc.).
  Updated: 2022 04 11    Language: Python

• wilhelm: Alternative API for IDA and Hex-Rays. wilhelm is an API for working with IDA, and in particular the Hex-Rays decompiler. It aims to wrap around the existing SDK's API, plus provide additional features and concepts that make reverse engineering easier.
  Updated: 2022 02 03    Language: Python

• Win32 LST to Inline Assembly: Python script which extracts procedures from IDA Win32 LST files and converts them to correctly dynamically linked compilable Visual C++ inline assembly.
  Updated: 2009 07 10    Language: Python

• Windows Driver Plugin: A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
  Updated: 2018 08 22    Language: Python

• WinIOCtlDecoder: An IDA Pro plugin which decodes a Windows Device I/O control code into DeviceType, FunctionCode, AccessType and MethodType.
  Updated: 2015 06 02    Language: Python

• WWCD: What Would Capstone Decode - IDA plugin that implements a Capstone powered IDA view.
  Updated: 2016 11 29    Language: C++

• x64dbgida: Official x64dbg plugin for IDA Pro.
  Updated: 2022 04 24    Language: Python

• X86Emu: Embedded x86 emulator for Ida Pro. Its purpose is to allow a reverse engineer the chance to step through x86 code while reverse engineering a binary. The plugin can help you step through any x86 binary from any platform. For Windows binaries, many common library calls are trapped and emulated by the emulator, allowing for a higher fidelity emulation. I find it particularly useful for stepping through obfuscated code as it automatically reorganizes an IDA disassembly based on actual code paths.
  Updated: 2020 10 13    Language: C++

• xdeobf: Experimental deobfuscation plugin for IDA 7.2. It aims to reverse control flow flattening transformation that I encountered (probably a variation of obfuscator-llvm).
  Updated: 2020 03 24    Language: C++

• Xex Loader for IDA 6.6: This adds the ability to load xex files into IDA directly without having to first process them in any way. It processes the xex file as much as possible while loading to minimise the work required by the user to get it to a state fit for reversing.
  Updated: 2013 09 23

• xray: Hexrays decompiler plugin that colorizes and filters the decompiler's output based on regular expressions
  Updated: 2022 01 29    Language: Python

• YaCo: Collaborative Reverse-Engineering for IDA. When enabled, an unlimited number of users can work simultaneously on the same binary. Any modification done by any user is synchronized through git version control. It has been initially released at SSTIC 2017
  Updated: 2018 11 14    Language: Python

• Yagi: Yet Another Ghidra Integration for IDA. Yagi intends to include the wonderful Ghidra decompiler into both IDA pro and IDA Free.
  Updated: 2021 12 20    Language: C++

Credits

The original list of 200 plugins came from onethawt's excellent idaplugins-list. His and other contributors' work was essential in putting together this interactive list.

Authors

• Vincent Mallet (vmallet)