Skip to content

ida pro 7.3 Replace yara with yara-python #33

@yywz1999

Description

@yywz1999

Problem:
Could not find any in this variable libyara.so Because it is a system variable and the directory is not writable
image

Solved :
As can be seen from pypi's official website, Yara has not been updated since 2014, but Yara Python has been released in 2020
image

Step1: install yara-python (yara.so)
pip install yara-python -i https://pypi.org/simple
image

Step2: copy "python2.7\site-packages\yara.so" to ida\python\yara.so
image
The size is 410k, compared with 96k in 2014

Success~
image

This IDA-plugin(findcrypt) is very good!! i behind u.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions