rhabdomancer
A fast IDA Pro plugin that finds calls to insecure API functions in binaries to aid vulnerability research.
What is rhabdomancer?
Rhabdomancer is a headless IDA Pro plugin that automatically locates calls to potentially insecure API functions within binary files. It helps vulnerability researchers quickly identify candidate points from which to backtrace and find pathways to untrusted input, streamlining the initial stages of security assessment.
Vulnerability researchers and security auditors who use IDA Pro for binary analysis and need to efficiently identify potential security vulnerabilities in C/C++ binaries.
Developers choose Rhabdomancer for its blazing-fast, headless operation using IDA Pro 9.x and Binarly's idalib Rust bindings, its prioritized findings grouped into three tiers of badness to focus audit efforts, and its easily customizable rule set via a TOML configuration file.
Overview
Vulnerability research assistant that locates calls to potentially insecure API functions in a binary file.
Use Cases
Best For
- Automating the initial identification of insecure API calls in binary files during security assessments.
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
