Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ida pro 7.3 Replace yara with yara-python #33

Open
yywz1999 opened this issue Dec 10, 2020 · 1 comment
Open

ida pro 7.3 Replace yara with yara-python #33

yywz1999 opened this issue Dec 10, 2020 · 1 comment

Comments

@yywz1999
Copy link

Problem:
Could not find any in this variable libyara.so Because it is a system variable and the directory is not writable
image

Solved :
As can be seen from pypi's official website, Yara has not been updated since 2014, but Yara Python has been released in 2020
image

Step1: install yara-python (yara.so)
pip install yara-python -i https://pypi.org/simple
image

Step2: copy "python2.7\site-packages\yara.so" to ida\python\yara.so
image
The size is 410k, compared with 96k in 2014

Success~
image

This IDA-plugin(findcrypt) is very good!! i behind u.

@yywz1999
Copy link
Author

You may take this yara.so Put it in the project , This eliminates the need to install Yara , Then add the installation method to readme: set the yara.so Put it in the IDA/python directory

Of course, this is just my personal suggestion.... :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant