IDA 作者博客文章列表

IDA pro 作者官方博客地址：

http://www.hexblog.com/

2020年5月，发现博客搬家了，新地址 https://www.hex-rays.com/blog/

文章目录：

http://www.hexblog.com/?p=0 IDAPython: namespacing for plugins, loaders & processor modules
http://www.hexblog.com/?p=5 Welcome!
http://www.hexblog.com/?p=6 Several files in one IDB
http://www.hexblog.com/?p=7 Several files in one IDB, part 2
http://www.hexblog.com/?p=8 Several files in one IDB, part 3
http://www.hexblog.com/?p=9 TLS callbacks
http://www.hexblog.com/?p=10 Several files in one IDB, part 4
http://www.hexblog.com/?p=11 Simple trick to hide IDA debugger
http://www.hexblog.com/?p=12 Stealth plugin
http://www.hexblog.com/?p=13 The ultimate stealth method
http://www.hexblog.com/?p=14 Sony DRM
http://www.hexblog.com/?p=15 How to unpack XCP.DAT?
http://www.hexblog.com/?p=16 The highlighter
http://www.hexblog.com/?p=17 Reading assembly code
http://www.hexblog.com/?p=18 The unispector
http://www.hexblog.com/?p=19 Tracing exception handlers
http://www.hexblog.com/?p=20 The longest arithmetic operation
http://www.hexblog.com/?p=21 Windows WMF Metafile Vulnerability HotFix
http://www.hexblog.com/?p=22 WMF Vulnerability Checker
http://www.hexblog.com/?p=23 Silent WMF Hotfix Installer
http://www.hexblog.com/?p=24 Back to normal operation
http://www.hexblog.com/?p=25 Return to the sources?
http://www.hexblog.com/?p=26 Text and graphics
http://www.hexblog.com/?p=27 FindCrypt
http://www.hexblog.com/?p=28 FindCrypt2
http://www.hexblog.com/?p=29 FOSDEM
http://www.hexblog.com/?p=30 Capricious programming
http://www.hexblog.com/?p=31 Nice dynamic graph
http://www.hexblog.com/?p=32 FOSDEM
http://www.hexblog.com/?p=33 On uninitialized variables
http://www.hexblog.com/?p=34 Coverage analyzer
http://www.hexblog.com/?p=35 IE6 vulnerabilty patch
http://www.hexblog.com/?p=36 IDA graph mode
http://www.hexblog.com/?p=37 Improving IDA analysis
http://www.hexblog.com/?p=38 Sainte Ida
http://www.hexblog.com/?p=39 Portable output for assembler
http://www.hexblog.com/?p=40 Linear algebra
http://www.hexblog.com/?p=41 Sad truth about programming
http://www.hexblog.com/?p=42 Simplex method in IDA Pro
http://www.hexblog.com/?p=43 Automated binary analysis woes 
http://www.hexblog.com/?p=45 Confusing instruction
http://www.hexblog.com/?p=46 ZERT patch
http://www.hexblog.com/?p=47 Loop colorizer
http://www.hexblog.com/?p=49 Heads and tails
http://www.hexblog.com/?p=50 Double renaming
http://www.hexblog.com/?p=51 Does ‘return’ come back?
http://www.hexblog.com/?p=52 Adding cross references
http://www.hexblog.com/?p=53 On batch analysis
http://www.hexblog.com/?p=54 Dynamic coloring
http://www.hexblog.com/?p=55 Very simple custom viewer
http://www.hexblog.com/?p=56 Decompilation gets real
http://www.hexblog.com/?p=57 Hex-Rays beta testing is open!
http://www.hexblog.com/?p=58 Finally, good STL replacement?
http://www.hexblog.com/?p=59 Trunk, Branches, and Leaves
http://www.hexblog.com/?p=60 Coordinate system for Hex-Rays
http://www.hexblog.com/?p=61 Never say never
http://www.hexblog.com/?p=62 OpenRCE?
http://www.hexblog.com/?p=63 Negated structure offsets
http://www.hexblog.com/?p=64 IDA and Microcontrollers
http://www.hexblog.com/?p=65 Hex-Rays SDK is ready!
http://www.hexblog.com/?p=66 Decompiler output ctree
http://www.hexblog.com/?p=67 Better user interface for decompiler
http://www.hexblog.com/?p=68 Jump tables
http://www.hexblog.com/?p=69 Debugger and process memory
http://www.hexblog.com/?p=70 MRXDAV.SYS and Hex-Rays Decompiler
http://www.hexblog.com/?p=71 Easy structure types
http://www.hexblog.com/?p=72 Tricky jump tables
http://www.hexblog.com/?p=73 Pythonic way
http://www.hexblog.com/?p=74 New Hex-Rays Demo
http://www.hexblog.com/?p=75 Hello Symbian!
http://www.hexblog.com/?p=76 Symbian AppTRK
http://www.hexblog.com/?p=77 Symbian debugger
http://www.hexblog.com/?p=78 Some functions are neater than the decompiler thinks
http://www.hexblog.com/?p=79 Testing debuggers
http://www.hexblog.com/?p=80 Recon2008
http://www.hexblog.com/?p=81 Apple’s variant of ptrace()
http://www.hexblog.com/?p=82 IDA on iPhone
http://www.hexblog.com/?p=83 Blackhat USA 2008
http://www.hexblog.com/?p=84 Mr. Bachaalany joins Hex-Rays
http://www.hexblog.com/?p=85 The IDA Pro book
http://www.hexblog.com/?p=86 BITS used as a covert channel
http://www.hexblog.com/?p=87 Bochs Emulator and IDA?
http://www.hexblog.com/?p=88 From simple to complex
http://www.hexblog.com/?p=89 Bochs plugin goes alpha
http://www.hexblog.com/?p=90 IDA and MIPS
http://www.hexblog.com/?p=91 IDA v5.4 release is not that far away
http://www.hexblog.com/?p=92 Kernel debugging with IDA
http://www.hexblog.com/?p=93 IDA Pro has 9 debugger modules
http://www.hexblog.com/?p=94 Advanced Windows Kernel Debugging with VMWare and IDA’s GDB debugger
http://www.hexblog.com/?p=95 IDA v5.4 demo
http://www.hexblog.com/?p=96 Decompiling floating point
http://www.hexblog.com/?p=97 IDA Pro 5.5 goes alpha
http://www.hexblog.com/?p=98 IDA Pro 5.5 and Hex-Rays 1.1 have been released!
http://www.hexblog.com/?p=99 Function call graph plugin sample
http://www.hexblog.com/?p=100 Casts are bad
http://www.hexblog.com/?p=101 Javascript for IDA Pro
http://www.hexblog.com/?p=102 Driver dispatch-table viewer
http://www.hexblog.com/?p=103 Develop your master boot record and debug it with IDA Pro and the Bochs debugger plugin
http://www.hexblog.com/?p=104 An attempt to reconstruct the call stack
http://www.hexblog.com/?p=105 Finding instructions
http://www.hexblog.com/?p=106 SEH Graph
http://www.hexblog.com/?p=107 Hex-Rays Decompiler primer
http://www.hexblog.com/?p=108 Hex-Rays is hiring
http://www.hexblog.com/?p=109 Hex-Rays Plugin Contest
http://www.hexblog.com/?p=110 PDF file loader to extract and analyse shellcode
http://www.hexblog.com/?p=111 Debugging ARM code snippets in IDA Pro 5.6 using QEMU emulator
http://www.hexblog.com/?p=112 Introducing the Appcall feature in IDA Pro 5.6
http://www.hexblog.com/?p=113 Practical Appcall examples
http://www.hexblog.com/?p=114 Hex-Rays against Aurora
http://www.hexblog.com/?p=115 New IDC improvement in IDA Pro 5.6
http://www.hexblog.com/?p=116 Scriptable Processor modules
http://www.hexblog.com/?p=117 Custom data types and formats
http://www.hexblog.com/?p=118 Preview of the new cross-platform IDA Pro GUI
http://www.hexblog.com/?p=119 Using custom viewers from IDAPython
http://www.hexblog.com/?p=120 Scriptable plugins
http://www.hexblog.com/?p=121 Environment variable editor
http://www.hexblog.com/?p=122 Book Review: The Art of Assembly Language, 2nd Edition
http://www.hexblog.com/?p=123 Kernel debugging with IDA Pro / Windbg plugin and VirtualKd
http://www.hexblog.com/?p=124 ARM decompiler beta is coming
http://www.hexblog.com/?p=125 UI and scripting improvements
http://www.hexblog.com/?p=126 Extending IDC and IDAPython
http://www.hexblog.com/?p=127 IDA Pro 5.7 highlights
http://www.hexblog.com/?p=128 Running scripts from the command line with idascript
http://www.hexblog.com/?p=129 Implementing command completion for IDAPython
http://www.hexblog.com/?p=130 Recon 2010: Intro to Embedded Reverse Engineering for PC reversers
http://www.hexblog.com/?p=193 Calculating API hashes with IDA Pro 
http://www.hexblog.com/?p=229 IDA Pro, Python and Qt
http://www.hexblog.com/?p=233 IDA Pro 6 licenses
http://www.hexblog.com/?p=250 IDA & Qt: Under the hood 
http://www.hexblog.com/?p=265 When choosers invade forms 
http://www.hexblog.com/?p=290 Challenging job for software developers
http://www.hexblog.com/?p=324 VirusTotal plugin for IDA Pro
http://www.hexblog.com/?p=333 Precompiled PySide binaries for IDA Pro
http://www.hexblog.com/?p=363 Book review: IDA Pro Book, 2nd Edition
http://www.hexblog.com/?p=403 Unpacking mpress’ed PE+ DLLs with the Bochs plugin
http://www.hexblog.com/?p=415 IDA Pro 6.2 with database snapshots support
http://www.hexblog.com/?p=432 Recon 2011: Practical C++ Decompilation
http://www.hexblog.com/?p=437 Filters & Shortcuts
http://www.hexblog.com/?p=468 New feature in IDA 6.2: The proximity browser
http://www.hexblog.com/?p=514 IDA Pro 6.2 beta
http://www.hexblog.com/?p=536 Code viewer, forms & timers
http://www.hexblog.com/?p=544 New features in Hex-Rays Decompiler 1.6
http://www.hexblog.com/?p=669 The trace replayer
http://www.hexblog.com/?p=695 Calling IDA APIs from IDAPython with ctypes
http://www.hexblog.com/?p=704 Recon 2012: Compiler Internals
http://www.hexblog.com/?p=726 Installing PIP packages, and using them from IDA on a 64-bit machine
http://www.hexblog.com/?p=749 Loading your own modules from your IDAPython scripts with idaapi.require()
http://www.hexblog.com/?p=764 Vulnerability fix for bTree engine
http://www.hexblog.com/?p=773 Interacting with IDA through IPC channels
http://www.hexblog.com/?p=783 x64 decompiler not far away
http://www.hexblog.com/?p=788 Extending IDAPython in IDA 6.5: Be careful about the GIL
http://www.hexblog.com/?p=809 IDA Dalvik debugger: tips and tricks
http://www.hexblog.com/?p=886 Augmenting IDA UI with your own actions.
http://www.hexblog.com/?p=906 IDAPython + PySide/PyQt: future plans
http://www.hexblog.com/?p=921 Hack of the day #0: Somewhat-automating pseudocode HTML generation, with IDAPython.
http://www.hexblog.com/?p=949 IDA + Windows + system python 2.7.11
http://www.hexblog.com/?p=958 Installing IDA 6.9 on Linux
http://www.hexblog.com/?p=969 IDA 6.9: Qt 5.4.1 configure options & patch
http://www.hexblog.com/?p=975 IDAPython: migrating PySide code to PyQt5
http://www.hexblog.com/?p=991 Beware: IDA C++ plugins, Qt 5.x, QStringLiteral: crash at exit-time
http://www.hexblog.com/?p=1016 IDA 6.9, Mac OS X, ‘random’ crashes
http://www.hexblog.com/?p=1048 Installing IDA 6.95 on Linux
http://www.hexblog.com/?p=1051 IDA 6.95: Qt 5.6.0 configure options & patch
http://www.hexblog.com/?p=1096 News about the x64 edition
http://www.hexblog.com/?p=1113 IDA 7.0: Qt 5.6.0 configure options & patch
http://www.hexblog.com/?p=1132 IDA and common Python issues
http://www.hexblog.com/?p=1151 IDAPython: namespacing for plugins, loaders & processor modules.

附：爬虫

import pycurl
import StringIO  

def get_content(url):    
    c = pycurl.Curl()
    c.setopt(pycurl.URL, url)   
    b = StringIO.StringIO()
    c.setopt(pycurl.WRITEFUNCTION, b.write)
    c.perform()
    return b.getvalue()


def get_html_head_1(html_text):
    '''<h1 class="entry-title">Introducing the Appcall feature in IDA Pro 5.6</h1>'''
    h1_text=""
    start_pos=html_text.find("<h1 class=\"entry-title\">")
    if start_pos==-1:
        return h1_text
    end_pos=html_text.find("</h1>",start_pos)
    if end_pos==-1:
        return h1_text
    nLen=len("<h1 class=\"entry-title\">")
    h1_text=html_text[start_pos+nLen:end_pos]
    return h1_text

f=open("title.txt","w")
for i in range(0,1160):
    url="http://www.hexblog.com/?p="+str(i)
    text="%s %s"%(url,get_html_head_1(get_content(url)))
    print text
    f.write(text+"\r\n")
f.close()