VM-Packages icon indicating copy to clipboard operation
VM-Packages copied to clipboard

Package proposal: bochs.vm

Open av-gantimurov opened this issue 1 year ago • 7 comments

Package Name

bochs

Tool Name

Bochs

Package type

OTHER (installer)

Is the tool a console application?

false

Tool's version number

2.7

Category

Debuggers

Tool's authors

Donald Becker, Greg Alexander, Christophe Bothamy, Volker Ruppert, Bryce Denney, Stanislav Shwartsman

Tool's description

Bochs is a portable x86 PC emulation software package that can be used as debugger in IDA Pro (Local Bochs debugger).

Download URL

https://netcologne.dl.sourceforge.net/project/bochs/bochs/2.7/Bochs-win64-2.7.exe

Download SHA256 Hash

a7428585b30ec3633c00bd38ef9dbb2d6c91cb4c29daa39a3c9b6b89e719ba90

Dependencies

No response

Why is this tool a good addition?

After installing Bochs may be used as Local Bochs Debugger in IDA Pro. IDA Pro has special Bochs debugger for x86 an x64 code (https://hex-rays.com/products/ida/support/idadoc/1329.shtml).

Additional information about using bochs debugger with IDA Pro in old Hex-Rays article.

av-gantimurov avatar Feb 12 '24 07:02 av-gantimurov

@av-gantimurov thanks for the proposal! :+1: The provided hash is not an SHA256 hash, can you please update the issue description with the correct hash?

Can you please also provide a link to the IDA plugin in https://github.com/mandiant/VM-Packages/issues/719? :smiley:

Ana06 avatar Feb 12 '24 09:02 Ana06

@av-gantimurov thanks for the proposal! 👍 The provided hash is not an SHA256 hash, can you please update the issue description with the correct hash?

Can you please also provide a link to the IDA plugin in #719? 😃

I wrote MD5 instead of SHA256. Fixed. IDA Pro supports local bochs debugger without any extra plugins by default. Worked with IDA 8.3 on Windows 10 without fault. I added some links with information about using Bochs debugger in first message.

av-gantimurov avatar Feb 13 '24 19:02 av-gantimurov

I wrote MD5 instead of SHA256. Fixed.

Our bot processes the package proposals and send a PR for it when we add the send PR label, but the information needs to be accurate/as expected. That's why we can't use the MD5 hash. Thanks for correcting it. As you can see, our bot has already send a PR 😉

IDA Pro supports local bochs debugger without any extra plugins by default. Worked with IDA 8.3 on Windows 10 without fault. I added some links with information about using Bochs debugger in first message.

We will add Bochs without without the plugin and close this issue. So I was proposing you suggest/document the Bosch plugin in the existent issue about plugins additions so that we don't forget about it and we get it in as well. We don't have automation for plugins (yet). 😄

Ana06 avatar Feb 14 '24 10:02 Ana06

@mandiant/flare-vm should we add bochs to the default flare-vm installation? I think so, I would like to be able to use Bochs in IDA. 🤔 Opinions?

Ana06 avatar Feb 14 '24 10:02 Ana06

Sadly the package type was not correct, the downloaded exe is not the tool itself but an installer and our bot does not support this package type (yet). Does someone want to send a PR for this one? 😄

Ana06 avatar Feb 14 '24 10:02 Ana06

@mandiant/flare-vm should we add bochs to the default flare-vm installation? I think so, I would like to be able to use Bochs in IDA. 🤔 Opinions?

Bochs supported only in IDA Pro, IDA Home and IDA Free has only local debugger (+GDBServer in IDA Home).

av-gantimurov avatar Feb 15 '24 06:02 av-gantimurov

Bochs supported only in IDA Pro, IDA Home and IDA Free has only local debugger (+GDBServer in IDA Home).

Good point! I do use IDA Pro 😄 We even have tools in the default configuration that only work with IDA Pro and not outside IDA like the capa plugin (ida.plugin.capa.vm) that needs python. I think it is nice that is there after I install IDA Pro in a VM with FLARE-VM. 😉

Ana06 avatar Feb 19 '24 09:02 Ana06