Page 1 of 1
any smart signature generators out there?
Posted: Thu Jan 16, 2025 8:03 pm
by reverser69
hi all
i wanted to develop a tool for AOB generation that could maximize future version compatibly; like detecting ModR/M, immediate values, calls and jumps , etc. then replace them with wild cards. i wanted to see if there already exists such feature/tool anywhere or not.
Re: any smart signature generators out there?
Posted: Fri Jan 17, 2025 10:34 am
by Messy6666
-
aSwedishMagyar - AOB Wildcard Generator (v4) :
viewtopic.php?f=23&t=15547
-
SnedS91, MasterGH, ++METHOS - AAmaker [Lua plugin] :
[Link]
for IDA Pro
-
gir489 - IDA 7.0 SigMaker :
viewtopic.php?f=23&t=7219
Re: any smart signature generators out there?
Posted: Fri Jan 17, 2025 12:34 pm
by reverser69
first one just grabs the first byte and masks out other.
second one doest even bother with masking.
the last one doesnt detect ModRm at least.
Re: any smart signature generators out there?
Posted: Fri Jan 17, 2025 3:14 pm
by Messy6666
^ ah ok
well AAMaker was my fav and certainly does masking ( options somewhere ) till aSwedishMagyar came up with his.
Well curious about your implementation, hope you post it on FRF when finished.
regards
Re: any smart signature generators out there?
Posted: Fri Jan 17, 2025 4:20 pm
by reverser69
currently I'm searching to avoid reinventing the wheel.