IDA_Pro_7.5安装keypatch、Findcrypt插件

xxHxx

0x00  Python包管理工具
   pip是Python包管理工具，安装pip这个工具，可以很方便的安装线上Python程序依赖库。

0x01  IDA Pro_7.5安装keypatch、Findcrypt插件的方法
插件下载；https://github.com/keystone-engine/keypatch
                https://github.com/polymorf/findcrypt-yara
（1）安装Python3
（2）Python_pip下载慢的解决方法：
    国内的一些镜像网站
    清华大学：https://pypi.tuna.tsinghua.edu.cn/simple
    阿里云：http://mirrors.aliyun.com/pypi/simple/
    中国科技大学 https://pypi.mirrors.ustc.edu.cn/simple/
    华中科技大学：http://pypi.hustunique.com/
    山东理工大学：http://pypi.sdutlinux.org/     豆瓣：http://pypi.douban.com/simple/
在 C:/用户/你的用户名 这个路径下创建一个pip文件夹，然后在其目录中建立一个pip.ini文件，并输入以下内容

[AppleScript] 纯文本查看 复制代码

[global]
index-url = [url=https://pypi.tuna.tsinghua.edu.cn/simple]https://pypi.tuna.tsinghua.edu.cn/simple[/url]
[install]
trusted-host=mirrors.aliyun.com

（2）以管理员身份运行CMD
（3）安装Python包管理工具pip：
      >>> pip install pip
            升级pip版本:>>> pip install --user --upgrade pip
            提示 No module named pip 解决方法：>>> python -m ensurepip
（4）>>> pip install keystone-engine
（5）>>> pip install six
（6）将 keypatch.py 放入 IDA 的 plugins 目录

（7）pip install yara-python
（8）将 findcrypt3.py、 findcrypt3.rules 放入 IDA 的 plugins 目录

0x02  其它Py插件的安装可以举一反三
  提示没有‘xxx’模块你，你就尝试安装‘xxx’模块
    如：No module named 'xxx'
    你就：pip install xxx

lincosmos

感谢分享。

pizazzboy

谢谢表哥分享。虽然我不会用IDA.

qinghg2020

谢谢表哥分享

slzslz

有么有组装好的绿色版，很需要啊，谢谢
https://www.python.org/downloads/release/python-391/
https://github.com/VirusTotal/yara/releases
[size=13.3333px]curl https://bootstrap.pypa.io/get-pip.py -o get-pip.py
[size=13.3333px]python get-pip.py
[size=13.3333px]https://blog.csdn.net/liwugang43210/article/details/50732920
[size=13.3333px][global]
index-url = https://pypi.tuna.tsinghua.edu.cn/simple
[install]
trusted-host=mirrors.aliyun.com

xmhwws

pip出问题了，请问大佬如何解决？
WARNING: pip is configured with locations that require TLS/SSL, however the ssl module in Python is not available.
WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError("Can't connect to HTTPS URL because the SSL module is not available.")': /simple/pip/
WARNING: Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError("Can't connect to HTTPS URL because the SSL module is not available.")': /simple/pip/
WARNING: Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError("Can't connect to HTTPS URL because the SSL module is not available.")': /simple/pip/
WARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError("Can't connect to HTTPS URL because the SSL module is not available.")': /simple/pip/
WARNING: Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError("Can't connect to HTTPS URL because the SSL module is not available.")': /simple/pip/
Could not fetch URL https://pypi.org/simple/pip/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='pypi.org', port=443): Max retries exceeded with url: /simple/pip/ (Caused by SSLError("Can't connect to HTTPS URL because the SSL module is not available.")) - skipping
Requirement already up-to-date: pip in d:\python\lib\site-packages (20.2.4)
WARNING: pip is configured with locations that require TLS/SSL, however the ssl module in Python is not available.
Could not fetch URL https://pypi.org/simple/pip/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='pypi.org', port=443): Max retries exceeded with url: /simple/pip/ (Caused by SSLError("Can't connect to HTTPS URL because the SSL module is not available.")) - skipping

878306890

感谢分享   虽然用不上

slzslz

不知道为啥KEYPATCH装不上

9797

为啥我安装好后插件列表内还是没有呀，，，唉