WillDawnlll

"""
IDAPython Script to highlight function calls.
Re-implemented by jthuraisamy (not the original author).

Install to %IDADIR%\plugins\highlight_calls.py.

Run by pressing Ctrl+Alt+H or go to Options -> Highlight Call Instructions.
"""

class HighlightHandler(idaapi.action_handler_t):

WillDawnlll

IDAPython cheatsheet

Important links

• Porting IDAPython plugins to IDA 7.4
• Hex-Rays IDAPython official documentation

Basic commands

Get informations on the binary

WillDawnlll

$base64data = "insert compressed and base64 data here"
$data = [System.Convert]::FromBase64String($base64data)
$ms = New-Object System.IO.MemoryStream
$ms.Write($data, 0, $data.Length)
$ms.Seek(0,0) | Out-Null

$sr = New-Object System.IO.StreamReader(New-Object System.IO.Compression.DeflateStream($ms, [System.IO.Compression.CompressionMode]::Decompress))

while ($line = $sr.ReadLine()) {  

WillDawnlll

" Vim color file
" Converted from Textmate theme  using Coloration v0.4.0 (http://github.com/sickill/coloration)
"
" Based on the machine filter from https://monokai.pro
" Edited a little by aaether
" For best results set termguicolors in your vimrc

set background=dark
highlight clear

WillDawnlll

# configuration for osx clipboard support


set-option -g default-command "reattach-to-user-namespace -l sh"

WillDawnlll

#Requires -version 2.0
## Stupid PowerShell Tricks
###################################################################################################
add-type @"
using System;
using System.Runtime.InteropServices;
public class Tricks {
   [DllImport("user32.dll")]
   private static extern bool ShowWindowAsync(IntPtr hWnd, int nCmdShow);