Mac IDA Pro7.0安装keypatch

Posted 2022-04-16 普通网友

什么是keypatch

keypatch 可以在IDA中直接修改二进制代码的插件， 项目地址

安装

由于我用的IDA是2017年泄露的7.0版本，因此使用的是Python2，那么首先使用pip2安装keystone-engine

> sudo pip install keystone-engine
Password:
DEPRECATION: Python 2.7 reached the end of its life on January 1st, 2020. Please upgrade your Python as Python 2.7 is no longer maintained. pip 21.0 will drop support for Python 2.7 in January 2021. More details about Python 2 support in pip, can be found at https://pip.pypa.io/en/latest/development/release-process/#python-2-support
WARNING: The directory '/Users/xmly/Library/Caches/pip' or its parent directory is not owned or is not writable by the current user. The cache has been disabled. Check the permissions and owner of that directory. If executing pip with sudo, you may want sudo's -H flag.
Collecting keystone-engine
  Downloading keystone_engine-0.9.2-py2.py3-none-macosx_10_14_x86_64.whl (3.0 MB)
     |████████████████████████████████| 3.0 MB 802 kB/s
Installing collected packages: keystone-engine
Successfully installed keystone-engine-0.9.2

之后拷贝git项目中的keypatch.py到ida pro的路径下：

> git clone https://github.com/keystone-engine/keypatch.git
> cd keypatch
> sudo cp keypatch.py /Applications/IDA\\ Pro/ida.app/Contents/MacOS/plugins/

之后重启IDA Pro即可使用插件。
右键菜单入口：

Edit菜单入口：