当前位置: 首页 > 微软应用 > 办公软件 > 正文
交互式反汇编器 IDA Free 8.2.221215 Hex-Rays Decompilers 官方免费版本

交互式反汇编器 IDA Free 8.2.221215 Hex-Rays Decompilers 官方免费版本

作者:大眼仔~旭 日期:4周前 (12-15) 评论:7 条

摘要:IDA Free  Hex-Rays Decompilers由大眼仔旭(www.dayanzai.me)发布。Hex-Rays 是一家专注于二进制软件分析的高科技公司,成立于 2005 年,总部位于比利时列日市(Liège),致力于研发强劲的二进制分析工具,为 IT 安全市场提供最佳产品和极其出色的服务。Hex-Ray…

IDA Free  Hex-Rays Decompilers大眼仔旭(www.dayanzai.me)发布。Hex-Rays 是一家专注于二进制软件分析的高科技公司,成立于 2005 年,总部位于比利时列日市(Liège),致力于研发强劲的二进制分析工具,为 IT 安全市场提供最佳产品和极其出色的服务。Hex-Rays 的旗舰产品 IDA 是全球最智能、功能最完善的交互式反汇编程序,许多软件安全专家和黑客都对这款软件如雷贯耳。IDA PRO 简称 IDA(Interactive Disassembler),是一个世界顶级的交互式反汇编工具,有两种可用版本。标准版(Standard)支持二十多种处理器。高级版(Advanced)支持50多种处理器。

交互式反汇编器 IDA Pro

交互式反汇编器 IDA Pro

随着逆向工程技术的热潮,软件逆向工程也在不断发展。 逆向分析技术是软件逆向工程中的重要方法和技术,在某些领域甚至是关键和唯一的问题解决途径。逆向分析技术是指通过分析机器码或汇编码来理解代码功能,如各接口的数据结构等,然后用高级语言重新描述该代码,逆向推出源程序的思路。

二进制程序逆向分析作为程序转换的主要手段发挥着积极的作用。程序转换被广泛用于对程序的理解和代码的编译,用来检测和维护代码、检测并定位bugs、学习算法、用户干预、增加功能等。程序转换的目标之一就是在尽可能大的语言范围内,以一种规范的方式对程序进行重用。

IDA 完全使用 C++ 编写而成,适用于三大主流操作系统:Microsoft Windows、Mac OS X 和 Linux。IDA 的主要目标之一,在于呈现尽可能接近源代码的代码,而且通过派生的变量和函数名称来尽其所能地注释生成的反汇编代码,货真价实。其内核算法的高速和可扩展性,使 Hex-Rays 不仅能够在众所周知的 C/C++ 反编译问题中取得突破性的进展,还为二进制分析领域的未来发展奠定了坚实的基础。

IDA Pro 许可证类型

IDA 提供三种许可证:

Named License(指定许可证):供一名特定的最终用户使用,而且可以在这名特定最终用户所使用的多台计算机上使用。Named License 适用于小型企业和个人用户。
Computer License(计算机许可证):供一台特定的计算机使用,而且可供使用这台计算机的多名最终用户使用,只要无论何时,只有一名用户处于活动状态即可。这种许可证适用于企业,因为它不与个人绑定,允许简便地再分配许可证。
Floating License(浮动/网络许可证):可以在(一家企业)无限数量的计算机上安装,不过只允许同时运行有限数量的副本。

IDA 软件提供两个版本

IDA Starter:支持 20 多种处理器,包括流行的 x86 和 ARM 处理器。IDA Starter 不支持 64 位文件。
IDA Professional:支持 50 多种处理器,而且支持 64 位文件(包括 Intel x86-64 代码)。

这两个版本都适用于 Windows、Linux 和 Mac OS X。

注意:以下功能仅在 Windows 版本中提供:

WinDbg 和 Symbian 调试器

通过 ActiveSync 进行的 WinCE 调试

Hex-Rays 为希望了解 IDA 基本功能的用户提供了一个功能有限的特别版本,但是,该特别版本并不是工最新版本的功能。该特别版本为 IDA 的简化版,除特别版本外,Hex-Rays 还提供当前版本的功能有限的演示版。

官方主页

What’s new in IDA 8.2.221215
December 15, 2022
Processor module improvements:
Xtensa module has been extensively reworked with the addition of various optional and macro instructions (number of supported instructions almost tripled) Most common switch patterns are recognized and marked up.
Xtensa switch and options:
Stack variables are now tracked and created in functions.
Xtensa stack vars:
RISC-V module can now disassemble vector extension instructions.
RISC-V Vector instructions:
Swift:
Metadata structures generated by the Swift compiler are parsed, fomatted and labeled. Some of the simple types which can be represented in IDA are imported into Local Types.
SWIFT formatted metadata SWIFT formatted metadata 2t SWIFT imported type SWIFT imported struct
A new plugin which can search for and display images(pictures) embedded in the current binary.
UI candy:
CSS-based IDA themes now support background images in many of IDA’s views
IDA Teams and Lumina:
lumina: added support for recent MySQL versions which default to TLS connection
teams: the password for Vault is now saved securely in the OS-specific keychain
vault/lumina: allow any local MAC address to match the one specified in .lic file
Procesor modules:
XTENSA: added support for many additional instructions, registers, stack variables
XTENSA: added support for many standard switch patterns
XTENSA: detect used ABI (CALL0 or windowed)
RISC-V: added support for vector extension instructions
TRICORE: decode FTOHP and HPTOF instructions from TC1.6.2
File formats:
macho: added USE_SEG_PREFIXES option to macho.cfg, which instructs IDA to use the Mach-O segment name as a prefix for IDA segment names, e.g. “__TEXT:__text”
FLIRT / TILS / IDS:
FLIRT: added signatures for vc1434 (Visual Studio 16.11)
FLIRT: added MFC signatures for vc1434 (Visual Studio 16.11)
FLIRT: added signatures for icl 222 (Intel C++ 2021.2)
FLIRT: added signatures for icl 2221 (Intel C++ 2021.2.1)
TIL: added a type library for Aarch64 (ARM64) UEFI 2.5
idaclang: added “–idaclang-mangle-format” switch. it works similarly to the -G option for tilib when the user wants to set a custom name mangling format
Standard plugins:
PDB: on Windows, enabled fallback mode by default so that MSDIA is used to load legacy PDB files
picture_search: new plugin for finding and displaying raster images embedded in the binary
svdimport: added support for cluster, derivedFrom and dim/dimIncrement peripheral attributes
svdimport: use a folder-based tree for the plugin’s UI
swift: parse and format Swift metadata
swift: import simple types (enums, structs) into Local Types
Kernel:
kernel: added a new flag REFINFO_SELFREF for offsets (base is equal to the address of the current element)
Scripting & SDK:
IDAPython: expose the C++ SDK’s processor_t (as ida_idp._processor_t)
SDK: added capture_process_output() to capture output of an external program;
SDK: added support for lazy-loaded dirtree choosers. CH2_LAZY_LOADED flag can be used with dirtree-based choosers to load contents of a directory when it’s expanded.
SDK: deprecated qerrcode() (errno can be accessed directly instead)
UI:
UI: added an easy way to take memory snapshot of current segment
UI: improved highlighting of matching registers on platforms which use various prefixes (e.g. @r1)
UI: in the disassembly, addresses in the line prefixes of structure or array members now increase with those members’ offsets.
UI: it is now possible to attribute an image as background to the listings (IDA View, Pseudocode, …) using CSS in themes
UI: jumping to an address in the middle of a struct or an array now positions cursor on the correct line of the disassembly listing
UI: the “Wait” dialog now only shows after a certain timeout (thereby reducing the number of interfering popping dialogs)
Decompilers:
decompiler: added an action to jump to a new pseudocode windows with ‘alt+enter’ shortcut
decompiler: enabled decompiling of 32-bit files in IDA64 if a corresponding 32-bit decompiler license is available
Bugfixes:
BUGFIX: arm: “set callee” (Alt-F11) failed to create cross-references for BLR instructions
BUGFIX: alpha: ‘lda’ instructions could cause wrong sized stack variables to be created
BUGFIX: DWARF: Debug information present in .dwz companion files (pointed to by .gnu_debugaltlink) would be skipped when the link is absolute
BUGFIX: FLAIR: The pelf utility could crash when used with incorrect ‘pelf.rtb’ files
BUGFIX: IDA could crash if an array typedef was replaced by a structure of the same size
BUGFIX: IDA could fail to detect dyld (and any loaded modules) after attaching to a process on macOS 13.
BUGFIX: IDA could fail to parse Objective-C method data during debugging.
BUGFIX: IDAPython: cfunc_t.arguments array could have function arguments in wrong order
BUGFIX: IDAPython: documentation for ida_kernwin.Choose callbacks was missing
BUGFIX: IDAPython: get_reg_vals() was not usable
BUGFIX: IDAPython: using values in the range [128,255) as ‘tag’ for ida_netnode functions, would fail
BUGFIX: ios_deploy “symbols” phase would fail on iOS 14-16.
BUGFIX: lumina: private lumina server could fail starting with certain MySQL setups, due to case sensitivity in INFORMATION_SCHEMA.COLUMNS fields
BUGFIX: PC: callee target was not printed for some call instructions
BUGFIX: svdimport: fixed problem with odd (+1) start addresses in segments
BUGFIX: ui/qt: IDA could crash when passed the wrong widget to ida_kernwin.get_highlight()
BUGFIX: ui: “size” expressions in ‘Structure offset’ context menu differed from ‘T’ hotkey
BUGFIX: ui: exporting data from hex view with non-default item width could produce wrong output
BUGFIX: UI: IDA on Windows would hang if the accessibilty option “Use text cursor indicator” was enabled
BUGFIX: ui: improvements for accessibility under Windows for “Text Cursor Indicator” on “Output” widget
BUGFIX: vault: ‘hv purge’ command was not usable
BUGFIX: xtensa: write acccesses for stack variables were not shown properly

https://hex-rays.com/products/ida/news/8_1/

IDA Free Windows 版本 Linux 版本 Mac 版本 Mac ARM 版本
点击下载 点击下载 点击下载 点击下载
IDA 的免费版本具有以下限制:
禁止用于商业用途
缺少IDA> v8.1中引入的所有功能
基于云的反编译器缺少某些高级命令
缺乏对许多处理器,文件格式等的支持…
没有技术支持
声明:大眼仔旭 | 本文采用署名-非商业性使用-相同方式共享 4.0 国际许可协议[CC BY-NC-SA]进行授权
文章名称:《交互式反汇编器 IDA Free 8.2.221215 Hex-Rays Decompilers 官方免费版本
文章固定链接:http://www.dayanzai.me/ida.html
本站资源仅供个人学习交流,请于下载后 24 小时内删除,不允许用于商业用途,否则法律问题自行承担。
转载声明
全部评论: (7条)
  1. goda2020-07-30 09:12 回复
    虽然 IDA Pro 7.3里有 Hex-Rays Decompilers插件,但是打开ida32位却没有这个插件显示,没有添加进来,没法用 。
1 2

发表评论

返回顶部