IPython uses a two-process model consisting of a kernel and a client. IPython is a toolkit that offers a more interactive experience with Python. While IDAPython serves the basic needs for running Python scripts and commands in IDA, Python enthusiasts have been gripped by IPython fever. Let’s turn to IPython and some attractive features it offers reverse engineers who use Python scripts in IDA. In addition to these and the many other windows that IDA provides, IDA allows you to write custom plugins that extend its features and solve practical reverse-engineering problems. Figure 1 shows the Output window after first loading MathLibrary.dll.

The Output window displays messages about the status of the analysis of a file, error messages for user-requested operations, and the output from some plugins. Let’s look at a few of these windows by loading the MathLibrary.dll file, which can be built with Microsoft’s tutorial on creating a DLL file. IDA Pro provides various windows into the database, each uniquely helping the researcher find and better understand the code of interest. After loading a file, IDA Pro disassembles it and stores the analysis in database files. IDA Pro is a disassembler that translates machine code to assembly code. Finally, if you would appreciate a brief introduction to IDA Pro, then read on.

If you are unfamiliar with IPython, then skip to the middle section. If you are already familiar with IDA Pro and IPython, then skip to the last section of this article on IPyIDA. IPyIDA serves a similar purpose as another plugin called IDA IPython, but with a twist: whereas IDA IPython only supports Windows, IPyIDA supports macOS, Linux, and Windows. Under continuous development since 2014, we’re pleased to announce the release of version 2.0. For ESET researchers, this tool is a favorite disassembler and has inspired the development of the IPyIDA plugin that embeds an IPython kernel into IDA Pro. IDA Pro from Hex-Rays is probably the most popular tool today for reverse-engineering software. ESET Research announces IPyIDA 2.0, a Python plugin integrating IPython and Jupyter Notebook into IDA

Ida hexrays