VM-Packages
VM-Packages copied to clipboard
mandiant
ida.plugin.diaphora.vm: Install it as an IDA plugin
Details
ida.diaphora.vm is just copying the diaphora script to the Utilities folder. It would be much useful if we would install it as a plugin as we do in ida.plugin.capa.vm and rename it as ida.plugin.diaphora.vm
I'll explore how difficullt this is. diaphora does not support installation as a plugin.
I think it's a great plugin! Would be nice to have it installed properly if possible. Thank you for looking into it!
I have explored writing a plugin file to wrap the script. The issue is to run the diaphora code with the current project structure, as it is not a Python module. Making the project a Python module would only imply changing the imports in diaphora to be prepended by diaphora.. After that, coping the diaphora plugin file and the diaphora Python module folder (similar to how we do with the flare module in ida.plugin.flare.vm would install diaphora as a plugin. So taking this into account, I think we should ask upstream if they would be up to supporting installing diaphora as a plugin and see if we can help.
diaphora has now plugin support: https://github.com/joxeankoret/diaphora/issues/301 :tada: Waiting for the release to make the change in VM-Packages :wink: