Hobi dan motivasi

Malware string hash lookup plugin for IDA Pro. This plugin connects to the OALABS HashDB Lookup Service.

The hash algorithm database is open source and new algorithms can be added on GitHub here. Pull requests are mostly automated and as long as our automated tests pass the new algorithm will be usable on HashDB within minutes.

HashDB can be used to look up strings that have been hashed in malware by right-clicking on the hash constant in the IDA disassembly view and launching the HashDB Lookup client.

Before the plugin can be used to look up hashes the HashDB settings must be configured. The settings window can be launched from the plugins menu Edit->Plugins->HashDB.

 

Click Refresh Algorithms to pull a list of supported hash algorithms from the HashDB API, then select the algorithm used in the malware you are analyzing.

There is also an option to enable XOR with each hash value as this is a common technique used by malware authors to further obfuscate hashes.

The default API URL for the HashDB Lookup Service is https://hashdb.openanalysis.net/. If you are using your own internal server this URL can be changed to point to your server.

When a new hash is identified by HashDB the hash and its associated string are added to an enum in IDA. This enum can then be used to convert hash constants in IDA to their corresponding enum name. The enum name is configurable from the settings in the event that there is a conflict with an existing enum.

Once the plugin settings have been configured you can right-click on any constant in the IDA disassembly window and look up the constant as a hash. The right-click also provides a quick way to set the XOR value if needed.

If a hash is part of a module a prompt will ask if you want to import all the hashes from that module. This is a quick way to pull hashes in bulk. For example, if one of the hashes identified is Sleep from the kernel32 module, HashDB can then pull all the hashed exports from kernel32.

 

HashDB also includes a basic algorithm search that will attempt to identify the hash algorithm based on a hash value. The search will return all algorithms that contain the hash value, it is up to the analyst to decide which (if any) algorithm is correct. To use this functionality right-click on the hash constant and select HashDB Hunt Algorithm.

All algorithms that contain this hash will be displayed in a chooser box. The chooser box can be used to directly select the algorithm for HashDB to use. If Cancel is selected no algorithm will be selected.

Instead of resolving API hashes individually (inline in code) some malware developers will create a block of import hashes in memory. These hashes are then all resolved within a single function creating a dynamic import address table which is later referenced in the code. In these scenarios the HashDB Scan IAT function can be used.

Simply select the import hash block, right-click and choose HashDB Scan IAT. HashDB will attempt to resolve each individual integer type (DWORD/QWORD) in the selected range.

Before using the plugin you must install the python requests module in your IDA environment. The simplest way to do this is to use pip from a shell outside of IDA.
pip install requests

Once you have the requests module installed simply copy the latest release of hashdb.py into your IDA plugins directory and you are ready to start looking up hashes!

The HashDB plugin has been developed for use with the IDA 7+ and Python 3 it is not backwards compatible.

Related links

1. Kik Hack Tools
2. Hacker Tools Online
3. Usb Pentest Tools
4. Pentest Tools Bluekeep
5. Hacker Tool Kit
6. Tools Used For Hacking
7. Hack Tools
8. Hacks And Tools
9. Pentest Tools Online
10. Hacking Tools Software
11. Hacker Tools For Windows
12. Pentest Automation Tools
13. Pentest Automation Tools
14. Hack Tools For Mac
15. Tools Used For Hacking
16. Hacker Tools Free Download
17. Hack Tool Apk No Root
18. Hacking Tools For Beginners
19. Hacker Tools Mac
20. Hacker Tools Online
21. Hacker Tools Github
22. Hacking Tools Windows 10
23. Github Hacking Tools
24. Kik Hack Tools
25. Pentest Tools List
26. Hacker Tool Kit
27. Pentest Tools Github
28. Hacking Tools Github
29. Hacking App
30. Pentest Tools For Mac
31. Hacking Tools 2020
32. Pentest Tools For Ubuntu
33. Wifi Hacker Tools For Windows
34. Hacking Tools 2019
35. How To Make Hacking Tools
36. Hack Tools Mac
37. Hacker Tools Apk Download
38. Hacker Tools Windows
39. Hacker Security Tools
40. Hacker
41. Hacker Search Tools
42. Pentest Tools Windows
43. Hack Tools Online
44. Hacking Tools Pc
45. Hacking Tools Free Download
46. Hack Tools
47. New Hacker Tools
48. Best Hacking Tools 2019
49. Kik Hack Tools
50. Hack And Tools
51. Hacker Tools Free Download
52. Bluetooth Hacking Tools Kali
53. Pentest Recon Tools
54. Hacking Tools 2019
55. Hack Tools For Games
56. Hack Tool Apk No Root
57. Ethical Hacker Tools
58. Hack Tools For Mac
59. Pentest Tools For Windows
60. Hacker Tools For Windows
61. Hacking Tools For Windows Free Download
62. Usb Pentest Tools
63. What Is Hacking Tools
64. Hacking Tools For Kali Linux
65. Best Hacking Tools 2020
66. How To Install Pentest Tools In Ubuntu
67. Usb Pentest Tools
68. Hackrf Tools
69. Hacker Tools Windows
70. Hacker
71. Bluetooth Hacking Tools Kali
72. Hacker Tools For Windows
73. Hacking Tools Github
74. Top Pentest Tools
75. Hacking Tools And Software
76. Game Hacking
77. Easy Hack Tools
78. Pentest Tools Linux
79. Pentest Tools Online
80. Pentest Tools Linux
81. Tools 4 Hack
82. Hacking Tools For Mac
83. Pentest Tools Framework
84. Hacker Search Tools
85. Bluetooth Hacking Tools Kali
86. Hacking Tools Mac
87. Growth Hacker Tools
88. Best Hacking Tools 2020
89. Hacking Tools Online
90. Hackrf Tools
91. Hacker Tools Github
92. Pentest Tools For Windows
93. Hacker Tools Hardware
94. Hacker Tools Mac
95. Pentest Tools Github
96. Pentest Tools Find Subdomains
97. Hacker Tools Apk Download
98. Hack Tools For Ubuntu
99. Blackhat Hacker Tools
100. Best Hacking Tools 2020
101. Hack Tool Apk
102. Best Hacking Tools 2019
103. Hacker Tools List
104. Hacking Tools Download
105. Hacker Tools Online
106. Nsa Hack Tools Download
107. Hack Tools Github
108. Hacker Tools Online
109. How To Make Hacking Tools
110. Hacker Tools For Windows
111. Tools 4 Hack
112. Bluetooth Hacking Tools Kali
113. Pentest Tools List
114. Hacker Tools Free Download
115. Hacking Tools Github
116. Hacker Techniques Tools And Incident Handling
117. Hack Tools For Mac
118. Hackers Toolbox
119. Game Hacking
120. Pentest Tools For Windows
121. Ethical Hacker Tools
122. Pentest Tools Bluekeep
123. Hacker Techniques Tools And Incident Handling
124. Hacking Tools And Software
125. Pentest Tools For Mac
126. Pentest Tools Android
127. Pentest Tools Linux
128. Nsa Hacker Tools
129. Hacking Tools For Windows Free Download
130. Github Hacking Tools
131. Hak5 Tools
132. Nsa Hacker Tools
133. Kik Hack Tools
134. Hacker Tools Linux
135. Pentest Tools Website Vulnerability
136. Hacking Tools For Mac
137. Pentest Tools Website Vulnerability
138. Tools Used For Hacking
139. Hack Tools For Games
140. Pentest Tools
141. Hacker Tools Hardware
142. Hacker Tools Linux
143. Pentest Tools Framework
144. Hacker Tools Apk Download
145. Hacking Tools Windows
146. Underground Hacker Sites
147. Pentest Tools Github
148. Hacker Tools For Windows
149. Hacking Tools For Kali Linux
150. Hacking Tools Free Download
151. Tools For Hacker
152. How To Hack
153. Hacking Tools For Pc
154. Pentest Tools Github
155. How To Make Hacking Tools
156. New Hacker Tools
157. Kik Hack Tools
158. Hacking Tools For Games
159. New Hack Tools
160. Best Hacking Tools 2020
161. Install Pentest Tools Ubuntu
162. What Is Hacking Tools
163. Hacking Tools Pc
164. Hack Rom Tools
165. Pentest Recon Tools
166. World No 1 Hacker Software
167. Pentest Tools Tcp Port Scanner
168. Hacking Tools For Beginners
169. Pentest Tools Alternative
170. Pentest Tools Android
171. Hacking Tools For Mac
172. Pentest Tools Online
173. Pentest Recon Tools
174. Pentest Tools Port Scanner
175. Hacking Tools For Kali Linux
176. Hacker Tools For Ios
177. New Hack Tools