TitleLeadingThe
Reviews"Chris proves again his captivating and informative writing style. We highly recommend this book." --Hex Blog " The IDA Pro Book, 2nd Edition is an excellent book." --Richard Bejtlich, TaoSecurity "The additions made to the book have made an excellent resource even better." --The Ethical Hacker Network "If you are serious about mastering IDA Pro, this is the only book that you need." --Hack in the Box Magazine "This is the manual you need if you use IDA Pro for fun or profit." --Secret Diabolical Workshop "This updated edition of The IDA Pro Book is well-organized, smoothly written, and nicely illustrated." --Books, Books & More (New) Books "The book provides many great examples that are easy to follow along with and complete yourself." --Small Town Geeks
Table Of ContentAcknowledgments Introduction PART I: Introduction to IDA Chapter 1: Introduction to Disassembly Chapter 2: Reversing and Disassembly Tools Chapter 3: IDA Pro Background PART II: Basic IDA Usage Chapter 4: Getting Started with IDA Chapter 5: IDA Data Displays Chapter 6: Disassembly Navigation Chapter 7: Disassembly Manipulation Chapter 8: Datatypes and Data Structures Chapter 9: Cross-References and Graphing Chapter 10: The Many Faces of IDA PART III: Advanced IDA Usage Chapter 11: Customizing IDA Chapter 12: Library Recognition Using FLIRT Signatures Chapter 13: Extending IDA's Knowledge Chapter 14: Patching Binaries and Other IDA Limitations PART IV: Extending IDA's Capabilities Chapter 15: IDA Scripting Chapter 16: The IDA Software Development Kit Chapter 17: The IDA Plug-in Architecture Chapter 18: Binary Files and IDA Loader Modules Chapter 19: IDA Processor Modules PART V: Real-World Applications Chapter 20: Compiler Personalities Chapter 21: Obfuscated Code Analysis Chapter 22: Vulnerability Analysis Chapter 23: Real-World IDA Plug-ins PART VI: The IDA Debugger Chapter 24: The IDA Debugger Chapter 25: Disassembler/Debugger Integration Chapter 26: Additional Debugger Features Appendix A: Using IDA Freeware 5.0 Appendix B: IDC/SDK Cross-Reference Index
SynopsisNo source code? No problem. With IDA Pro, the interactive disassembler, you live in a source code-optional world. IDA can automatically analyze the millions of opcodes that make up an executable and present you with a disassembly. But at that point, your work is just beginning. With The IDA Pro Book, you'll learn how to turn that mountain of mnemonics into something you can actually use. Hailed by the creator of IDA Pro as 'profound, comprehensive, and accurate,' the second edition of The IDA Pro Book covers everything from the very first steps to advanced automation techniques. You'll find complete coverage of IDA's new Qt-based user interface, as well as increased coverage of the IDA debugger, the Bochs debugger, and IDA scripting (especially using IDAPython). But because humans are still smarter than computers, you'll even learn how to use IDA's latest interactive and scriptable interfaces to your advantage. Save time and effort as you learn to: Navigate, comment, and modify disassembly Identify known library routines, so you can focus your analysis on other areas of the code Use code graphing to quickly make sense of cross references and function calls Extend IDA to support new processors and filetypes using the SDK Explore popular plug-ins that make writing IDA scripts easier, allow collaborative reverse engineering, and much more Use IDA's built-in debugger to tackle hostile and obfuscated code Whether you're analyzing malware, conducting vulnerability research, or reverse engineering software, a mastery of IDA is crucial to your success. Take your skills to the next level with this 2nd edition of The IDA Pro Book., IDA Pro is a commercial disassembler and debugger used byreverse engineers to dissect compiled computer programs,and is the industry standard tool for analysis of hostilecode. The IDA Pro Book provides a comprehensive, top-downoverview of IDA Pro and its use for reverse engineeringsoftware. Author Chris Eagle, a recognized expert in ......, IDA Pro is a commercial disassembler and debugger used byreverse engineers to dissect compiled computer programs,and is the industry standard tool for analysis of hostilecode. The IDA Pro Book provides a comprehensive, top-downoverview of IDA Pro and its use for reverse engineeringsoftware. Author Chris Eagle, a recognized expert in thefield, takes readers from the basics of disassemblytheory to the complexities of using IDA Pro in real-worldsituations. Topics are introduced in the order mostfrequently encountered, allowing experienced users toeasily jump in at the most appropriate point. Eaglecovers a variety of real-world reverse engineeringchallenges and offers strategies to deal with them, suchas disassembly manipulation, graphing, and effective useof cross references. This second edition of The IDA ProBook has been completely updated and revised to cover thenew features and cross-platform interface of IDA Pro 6.0.Other additions include expanded coverage of the IDA ProDebugger, IDA Python, and the IDA Pro SDK., No source code? No problem. With IDA Pro, the interactive disassembler, you live in a source code-optional world. IDA can automatically analyze the millions of opcodes that make up an executable and present you with a disassembly. But at that point, your work is just beginning. With The IDA Pro Book , you'll learn how to turn that mountain of mnemonics into something you can actually use. Hailed by the creator of IDA Pro as "profound, comprehensive, and accurate," the second edition of The IDA Pro Book covers everything from the very first steps to advanced automation techniques. You'll find complete coverage of IDA's new Qt-based user interface, as well as increased coverage of the IDA debugger, the Bochs debugger, and IDA scripting (especially using IDAPython). But because humans are still smarter than computers, you'll even learn how to use IDA's latest interactive and scriptable interfaces to your advantage. Save time and effort as you learn to: -Navigate, comment, and modify disassembly -Identify known library routines, so you can focus your analysis on other areas of the code -Use code graphing to quickly make sense of cross references and function calls -Extend IDA to support new processors and filetypes using the SDK -Explore popular plug-ins that make writing IDA scripts easier, allow collaborative reverse engineering, and much more -Use IDA's built-in debugger to tackle hostile and obfuscated code Whether you're analyzing malware, conducting vulnerability research, or reverse engineering software, a mastery of IDA is crucial to your success. Take your skills to the next level with this 2nd edition of The IDA Pro Book .