uEmu | Tiny Cute Emulator Plugin For IDA Based On Unicorn
by B1ACK-J0K3R - March 08, 2021 at 07:34 AM
#1
uEmu is a tiny cute emulator plugin for IDA based on unicorn engine.

Supports following architectures out of the box: x86, x64, ARM, ARM64, MIPS, MIPS64

What is it GOOD for?
  • Emulate bare metal code (bootloaders, embedded firmware etc)
  • Emulate standalone functions
What is it BAD for?
  • Emulate complex OS code (dynamic libraries, processes etc)
  • Emulate code with many syscalls
What can be improved?
  • Find a way to emulate vendor specific register access (like MSR S3_x, X0 for ARM64)
  • Add more registers to track
Installation
  • brew install unicorn to install Unicorn binaries
  • pip install unicorn to install Unicorn python bindings
  • Use File / Script file... or ALT+F7 in IDA to load uEmu.py
Optionally uEmu can be loaded automatically as IDA plugin. In this case put it into [IDA]/Plugins folder and change USE_AS_SCRIPT to False inside uEmu.py

  1. Note: on Windows you might need to add IDA Pro Qt5 path
import sys
sys.path.append('D:\Soft\IDA Pro 7.x\python\3\PyQt5')


https://github.com/alexhude/uEmu
This forum account currently has an ongoing scam report, please beware trading.
Details: https://raidforums.com/Thread-group-zerodaylab-on-telegram-are-scammers?highlight=zer0daylab
Reply

Possibly Related Threads…
Thread Author Replies Views Last Post
Ninjutsu OS - Windows based penetrating testing os, 800 tools rauden 36 3,796 5 hours ago
Last Post: os1r1s78
Nessus Plugin(202108230519)+Unlimited+linux update script lnterface 54 7,676 Yesterday at 01:38 PM
Last Post: Ansl
Nessus Plugin(202110210308)+Unlimited+linux update script lnterface 44 4,395 November 29, 2021 at 10:22 AM
Last Post: db04byg

 Users browsing this thread: 1 Guest(s)