Unicorn 是一个模拟执行库,支持多个平台,在逆向工程中动态分析指令流程非常有用。

笔者某些IDA脚本需要依赖unicorn,今天在安装后,发现不能使用。2.1.0和2.1.1在使用mem_map直接导致IDA崩溃。

可能与Mac Pro的Apple silicon有关,回头查 …

Background

As a reverse engineer, I often use IDA Pro in my daily work. This is not surprising, as IDA Pro is the industry standard (although alternatives such as radare2 and Hopper are becoming increasingly popular). One of the most powerful features of IDA that I recommended all reverse engineers is the Python extension, aptly named 'IDAPython', which exposes a large number of IDA …