immSignSrch (iss)
Current version: 0.5 [idea]
Description:
immSignSrch is a signatures scanner plugin for Immunity Debugger developed upon Luigi Auriemma's signSrch ( diff ).
Features:
- Fast search engine
- It can recognize:
- tons of compression, multimedia and encryption algorithms
- many other things (like known strings and anti-debugging code)
- Signatures DB automatically updatable from the program itself and editable by hand
New features and improvements are coming so stay tuned
Screen:
Changelog:
- 05-May-2008: Improved python script.
- 04-May-2008: Added hardware breakpoint support.
- 01-May-2008: Some fixes to improve scanning output.
- 02-Apr-2008: Added embedded manifest to guarantee correct runtime behavior.
- 31-Mar-2008: First public release of iss.
Usage:
From the command line ( ALT + F1 ) type: !iss -h
Notice:
[*] If you want new features into the next release of this plugin feel free to drop me an email.
[*] If you have new signatures to improve the signatures DB please let me know.
[*] If you find any bugs please report me the problem in order to improve this plugin.
Download:
- Latest release of immSignSrch is available here.
Have fun :)
- ratsoul
