Python IDA Plugin DIE Dynamic IDA Enrichment

[Storm Shadow]

I think its a bug within ida,the stuff is there in python 6.6.
just dont get loaded right.

 

[steve007iii]

try python

Python>help("modules")

Please wait a moment while I gather a list of all available modules...

ADB_Helper_QT_Super _imagingtk idaapi setup
ArgImagePlugin _io idapatcher setuptools
BaseHTTPServer _json idautils sgmllib
Bastion _locale idc sha
BdfFontFile _lsprof idlelib shelve
BmpImagePlugin _markerlib ihooks shlex
BufrStubImagePlugin _md5 imageop shutil
CGIHTTPServer _msi imaplib signal
Canvas _multibytecodec imghdr silpa_common
Code editor _multiprocessing imp sip
ConfigParser _osx_support importlib sipconfig
ContainerIO _pyio imputil sipdistutils
Cookie _pytest init siputils
CurImagePlugin _random inspect site
DIE _sha io six
DcxImagePlugin _sha256 ipythonEmbed smtpd
Dialog _sha512 isapi smtplib
Diaphora_plugin_loader _socket itertools sndhdr
DocXMLRPCServer _sqlite3 jinja2 socket
EpsImagePlugin _sre json spyderlib
ExifTags _ssl jsonschema spyderplugins
FileDialog _strptime karmadbg sqlalchemy
FitsStubImagePlugin _struct keys sqlite3
FixTk _subprocess keyword sre
FliImagePlugin _symtable lib2to3 sre_compile
FontFile _testcapi linecache sre_constants
FpxImagePlugin _threading_local locale sre_parse
Free_The_Debuggers _tkinter logging ssl
Frida_caller _util logilab sspi
GbrImagePlugin _warnings macpath sspicon
GdImageFile _weakref macurl2path stat
GifImagePlugin _weakrefset mailbox statvfs
GimpGradientFile _webp mailcap string
GimpPaletteFile _win32sysloader markupbase stringold
GribStubImagePlugin _winreg markupsafe stringprep
HTMLParser _winxptheme marshal strop
Hdf5StubImagePlugin abc math struct
IcnsImagePlugin adb md5 subprocess
IcoImagePlugin adodbapi mechanize sunau
IdaScylla afxres mhlib sunaudio
ImImagePlugin aifc mimetools symbol
Image antigravity mimetypes symtable
ImageChops anydbm mimify sys
ImageCms argparse mistune sysconfig
ImageColor array mmap tabnanny
ImageDraw ast mmapfile tarfile
ImageDraw2 astroid mmsystem telnetlib
ImageEnhance asynchat modulefinder tempfile
ImageFile asyncore msilib terminado
ImageFileIO atexit msvcrt test
ImageFilter attrdict multifile textwrap
ImageFont audiodev multiprocessing this
ImageGL audioop mutex thread
ImageGrab awesome netbios threading
ImageMath backports netrc time
ImageMode base64 networkx timeit
ImageMorph bdb new timer
ImageOps binascii nntplib tkColorChooser
ImagePalette binhex nose tkCommonDialog
ImagePath bisect nt tkFileDialog
ImageQt bob ntpath tkFont
ImageSequence bottle ntsecuritycon tkMessageBox
ImageShow bs4 nturl2path tkSimpleDialog
ImageStat bsddb numbers toaiff
ImageTk bson numpy token
ImageTransform builtin_inference odbc tokenize
ImageWin bz2 oletools tornado
ImtImagePlugin c opcode tox
IptcImagePlugin cPickle operator trace
Jpeg2KImagePlugin cProfile optparse traceback
JpegImagePlugin cStringIO ordered_set ttk
JpegPresets calc os tty
Lib calendar os2emxpath turtle
McIdasImagePlugin capstone parser types
MicImagePlugin certifi pcapparser uncompyle2
MimeWriter cgi pdb unicodedata
MpegImagePlugin cgitb pefile unittest
MpoImagePlugin chardet perfmon urllib
MspImagePlugin chunk peutils urllib2
OleFileIO class pickle urlparse
PIL clipboard pickletools user
PSDraw cmath pip uu
PaletteFile cmd pip_loader uuid
PalmImagePlugin code pipes virtualenv
PcdImagePlugin codecs pkg_resources virtualenv_support
PcfFontFile codeop pkgutil warnings
PcxImagePlugin collections platform wave
PdfImagePlugin colorama plistlib weakref
PixarImagePlugin colorsys popen2 webbrowser
Plugins commands poplib wheel
PngImagePlugin commctrl posixfile whichdb
PpmImagePlugin compileall posixpath win2kras
PsdImagePlugin compiler pprint win32api
PyAccess contextlib profile win32clipboard
PyInstaller cookielib pstats win32com
PyQt-win copy ptk_lib win32con
PyQt4 copy_reg ptvsd win32console
PyQt5 courseradownloader pty win32cred
PySide cov_core ptyprocess win32crypt
Python_editor cov_core_init py win32cryptcon
Queue coverage py2gi win32event
ScrolledText crcmod py2mechanize win32evtlog
SgiImagePlugin csv py2pytest win32evtlogutil
SimpleDialog ctypes py2qt4 win32file
SimpleHTTPServer curses py2stdlib win32gui
SimpleXMLRPCServer datetime py_compile win32gui_struct
SocketServer dbhash pyc_fmtstr_parser win32help
SpiderImagePlugin dbi pyclbr win32inet
StringIO dde pycparser win32inetcon
SunImagePlugin decimal pydasm win32job
TarIO decorator pydbg win32lz
TgaImagePlugin die_proxy pydeelib win32net
TiffImagePlugin difflib pydoc win32netcon
TiffTags dircache pydoc_data win32pdh
Tix dis pyexpat win32pdhquery
Tkconstants distutils pygame win32pdhutil
Tkdnd django pygdb2 win32pipe
Tkinter doctest pyglet win32print
UI dumbdbm pygments win32process
UserDict dummy_thread pygments_style_cheerfully_dark win32profile
UserList dummy_threading pykd win32ras
UserString easy_install pylint win32rcparser
WalImageFile elftools pymongo win32security
WebPImagePlugin email pynose win32service
WmfImagePlugin encodings pyperclip win32serviceutil
XVThumbImagePlugin ensurepip pyqode win32timezone
XbmImagePlugin eric5config pyqtdeploy win32trace
XpmImagePlugin errno pyqtgraph win32traceutil
_LWPCookieJar exceptions pysideuic win32transaction
_MozillaCookieJar filecmp pysix_moves win32ts
__builtin__ fileinput pytest win32ui
__future__ flufl pytest_cov win32uiole
_abcoll fnmatch pythoncom win32verstamp
_ast formatter pytz win32wnet
_binary fpformat pywin winerror
_bisect fractions pywin32_testutil winioctlcon
_bsddb frida pywintypes winnt
_codecs ftplib qdarkstyle winperf
_codecs_cn functools qt winsound
_codecs_hk functools32 quopri winxpgui
_codecs_iso2022 future_builtins rand winxptheme
_codecs_jp gc random wrapt
_codecs_kr genericpath rasutil wsgiref
_codecs_tw getopt re wx
_collections getpass regcheck wxversion
_csv gettext regutil xdrlib
_ctypes glob repr xml
_ctypes_test gridfs requests xmllib
_elementtree guesslanguage rexec xmlrpclib
_frida gzip rfc822 xxsubtype
_functools hashlib rlcompleter yaml
_hashlib heapq robotparser yapsy
_heapq helloworld runpy yara
_hotshot hexrays sark zipfile
_imaging hmac sched zipimport
_imagingcms hotshot scylla zlib
_imagingft htmlentitydefs select zmq
_imagingmath htmllib servicemanager
_imagingmorph httplib sets [/QUOTE ]


if it dosent show install latest here https://pypi.python.org/pypi/networkx/

or
pip install git://github.com/networkx/networkx.git#egg=networkx
or pip install --upgrade git://github.com/networkx/networkx.git#egg=networkx

>>>.help("modules")
Please.wait.a.moment.while.I.gather.a.list.of.all.available.modules...
BaseHTTPServer......bisect..............mmapfile............sys
Bastion.............bsddb...............mmsystem............sysconfig
CGIHTTPServer.......bz2.................modulefinder........tabnanny
Canvas..............cPickle.............msilib..............tarfile
ConfigParser........cProfile............msvcrt..............telnetlib
Cookie..............cStringIO...........multifile...........tempfile
Dialog..............calendar............multiprocessing.....test
DocXMLRPCServer.....cgi.................mutex...............textwrap
FileDialog..........cgitb...............netbios.............this
FixTk...............chunk...............netrc...............thread
HTMLParser..........cmath...............new.................threading
MimeWriter..........cmd.................nntplib.............time
MySQLdb.............code................nt..................timeit
PyQt4...............codecs..............ntpath..............timer
PySide..............codeop..............ntsecuritycon.......tkColorChooser
Queue...............collections.........nturl2path..........tkCommonDialog
ScrolledText........colorsys............numbers.............tkFileDialog
SimpleDialog........commands............numpy...............tkFont
SimpleHTTPServer....commctrl............oauth2..............tkMessageBox
SimpleXMLRPCServer..compileall..........odbc................tkSimpleDialog
SocketServer........compiler............opcode..............toaiff
StringIO............contextIO...........operator............token
Tix.................contextIO2..........optparse............tokenize
Tkconstants.........contextlib..........ordlookup...........trace
Tkdnd...............cookielib...........os..................traceback
Tkinter.............copy................os2emxpath..........ttk
UserDict............copy_reg............parser..............tty
UserList............csv.................pdb.................turtle
UserString..........ctypes..............pefile..............types
_LWPCookieJar.......curses..............perfmon.............unicodedata
_MozillaCookieJar...datetime............peutils.............unittest
__builtin__.........dbhash..............pickle..............urllib
__future__..........dbi.................pickletools.........urllib2
_abcoll.............dde.................pipes...............urlparse
_ast................decimal.............pkgutil.............user
_bisect.............difflib.............platform............uu
_bsddb..............dircache............plistlib............uuid
_codecs.............dis.................popen2..............warnings
_codecs_cn..........distutils...........poplib..............wave
_codecs_hk..........doctest.............posixfile...........weakref
_codecs_iso2022.....dumbdbm.............posixpath...........webbrowser
_codecs_jp..........dummy_thread........pprint..............whichdb
_codecs_kr..........dummy_threading.....profile.............win2kras
_codecs_tw..........email...............pstats..............win32api
_collections........encodings...........pty.................win32clipboard
_csv................errno...............py_compile..........win32com
_ctypes.............exceptions..........pyclbr..............win32con
_ctypes_test........filecmp.............pydoc...............win32console
_elementtree........fileinput...........pydoc_data..........win32cred
_functools..........fnmatch.............pyexpat.............win32crypt
_hashlib............formatter...........pysideuic...........win32cryptcon
_heapq..............fpformat............pysqlite2...........win32event
_hotshot............fractions...........pythoncom...........win32evtlog
_io.................ftplib..............pywin...............win32evtlogutil
_json...............functools...........pywin32_testutil....win32file
_locale.............future_builtins.....pywintypes..........win32gui
_lsprof.............gc..................quopri..............win32gui_struct
_md5................gdata...............random..............win32help
_msi................genericpath.........rasutil.............win32inet
_multibytecodec.....getopt..............re..................win32inetcon
_multiprocessing....getpass.............regcheck............win32job
_mysql..............gettext.............regutil.............win32lz
_mysql_exceptions...glob................repr................win32net
_osx_support........gzip................rexec...............win32netcon
_pyio...............handlers............rfc822..............win32pdh
_random.............hashlib.............rlcompleter.........win32pdhquery
_sha................heapq...............robotparser.........win32pdhutil
_sha256.............hmac................runpy...............win32pipe
_sha512.............hotshot.............sched...............win32print
_socket.............htmlentitydefs......select..............win32process
_sqlite3............htmllib.............servicemanager......win32profile
_sre................httplib.............sets................win32ras
_ssl................httplib2............settings............win32rcparser
_strptime...........idlelib.............setup...............win32security
_struct.............ihooks..............sgmllib.............win32service
_subprocess.........imageop.............sha.................win32serviceutil
_symtable...........imaplib.............shelve..............win32timezone
_testcapi...........imapoauth...........shlex...............win32trace
_threading_local....imghdr..............shutil..............win32traceutil
_tkinter............imp.................signal..............win32transaction
_warnings...........importlib...........sip.................win32ts
_weakref............imputil.............site................win32ui
_weakrefset.........inspect.............smtpd...............win32uiole
_win32sysloader.....io..................smtplib.............win32verstamp
_winreg.............isapi...............sndhdr..............win32wnet
_winxptheme.........itertools...........socket..............winerror
_yaml...............json................sqlite3.............winioctlcon
abc.................keyword.............sre.................winnt
adodbapi............lib2to3.............sre_compile.........winperf
afxres..............linecache...........sre_constants.......winsound
aifc................locale..............sre_parse...........winxpgui
antigravity.........logging.............ssl.................winxptheme
anydbm..............macpath.............sspi................wsgiref
argparse............macurl2path.........sspicon.............xdrlib
array...............mailbox.............stat................xml
ast.................mailcap.............statvfs.............xmllib
asynchat............main................string..............xmlrpclib
asyncore............markupbase..........stringold...........xxsubtype
atexit..............marshal.............stringprep..........yaml
atom................math................strop...............yara
audiodev............md5.................struct..............zipfile
audioop.............mhlib...............subprocess..........zipimport
base64..............mimetools...........sunau...............zlib
bdb.................mimetypes...........sunaudio
binascii............mimify..............symbol
binhex..............mmap................symtable
Enter.any.module.name.to.get.more.help...Or,.type."modules.spam".to.search
for.modules.whose.descriptions.contain.the.word."spam".
>>>

--------------------------------------------------------------------------------------------------------------------
" networkx " It detects it any idea?


"networkx-1.10rc2" and copy the entire folder in "C:\Python27\Lib\site-packages" I do not understand why it does not work
C:\Python27\Lib\site-packages\networkx-1.10rc2\setup.py
C:\Python27\Lib\site-packages\networkx-1.10rc2\doc
C:\Python27\Lib\site-packages\networkx-1.10rc2\networkx
C:\Python27\Lib\site-packages\networkx-1.10rc2\examples
C:\Python27\Lib\site-packages\networkx-1.10rc2\networkx.egg-info
C:\Python27\Lib\site-packages\networkx-1.10rc2\setup.cfg
...etc

 

[Storm Shadow]

just delete the folder and reinstall it with

pip install git://github.com/networkx/networkx.git#egg=networkx

rermemberr to have git installed https://msysgit.github.io/

 

[schrodinger]

I think its a bug within ida,the stuff is there in python 6.6.
just dont get loaded right.

I didn't manage to get the patch, the author was stating in the plugin issues section

 

[Storm Shadow]

patch is only for 6.7 and up

 

[schrodinger]

did u manage to get it working on the 6.7 modded version you have?
Anyway, I hope you come up with solution soon.

 

[Storm Shadow]

did u manage to get it working on the 6.7 modded version you have?

it work on that version with no issues

 

[schrodinger]

You mean the one http://forum.exetools.com/showthread.php?t=16897

If so please, share with me the links as I don't have access

 

[RiverDave]

I'm trying to install DIE in IDA pro 7 but due to pyside dependency I'm getting error, please help me get working on IDA 7

C:\Program Files\IDA 7.0\plugins\die_proxy.py: No module named PySide
Traceback (most recent call last):
File "C:\Program Files\IDA 7.0\python\ida_idaapi.py", line 553, in IDAPython_ExecScript
execfile(script, g)
File "C:/Program Files/IDA 7.0/plugins/die_proxy.py", line 13, in <module>
plugin = imp.load_source(__name__, plugin_path)
File "C:\Users\admin\Documents\IDA Plugins\DIE-master\DIE-master\DIE.py", line 24, in <module>
import DIE.UI.BPView
File "C:\Users\admin\Documents\IDA Plugins\DIE-master\DIE-master\DIE\UI\__init__.py", line 3, in <module>
from PySide import QtCore
ImportError: No module named PySide
IDAPython Hex-Rays bindings initialized.
C:\Program Files\IDA 7.0\plugins\die_proxy.py:
Importing PySide disabled by QtConsole, which has
already imported an incompatible Qt Binding: pyqt5

Traceback (most recent call last):
File "C:\Program Files\IDA 7.0\python\ida_idaapi.py", line 553, in IDAPython_ExecScript
execfile(script, g)
File "C:/Program Files/IDA 7.0/plugins/die_proxy.py", line 13, in <module>
plugin = imp.load_source(__name__, plugin_path)
File "C:\Users\admin\Documents\IDA Plugins\DIE-master\DIE-master\DIE.py", line 24, in <module>
import DIE.UI.BPView
File "C:\Users\admin\Documents\IDA Plugins\DIE-master\DIE-master\DIE\UI\__init__.py", line 3, in <module>
from PySide import QtCore
File "C:\Python27\lib\site-packages\qtconsole\qt_loaders.py", line 63, in load_module
""" % (fullname, loaded_api()))
ImportError:
Importing PySide disabled by QtConsole, which has
already imported an incompatible Qt Binding: pyqt5

 

[Storm Shadow]

@RiverDave
The plugin is so old that it uses PySide instead of PyQt5.
You can try in __init__.py to add line at very begining
import PyQt5 as PySide.

 

[RiverDave]

@RiverDave
The plugin is so old that it uses PySide instead of PyQt5.
You can try in __init__.py to add line at very begining
import PyQt5 as PySide.

I am new to IDA and this plugins stuff can you please guide in detail how to do it or if there is post of how to plese direct me to it.