crackercat / docker-idapro Goto Github PK

docker-idapro

IDA Pro Docker Image

Why?

For use as an ipsw pipeline.

Dependencies

• ubuntu:focal

Image Tags

REPOSITORY              TAG                 SIZE
blacktop/idapro         latest              804MB
blacktop/idapro         7.7                 804MB

Getting Started

On macOS

1. Install XQuartz brew install --cask xquartz
2. open -a XQuartz and make sure you "Allow connections from network clients"
3. Now add the IP using Xhost with: xhost + 127.0.0.1 or xhost + $(ipconfig getifaddr en0)
4. Start up IDA Pro

docker run --init -it --rm \
           --name idafree \
           -v `pwd`:/data \
           -e DISPLAY=host.docker.internal:0 \
           blacktop/idapro /data/bin

Build IDA Pro

1. Put a copy of the linux installer in the pro folder and name it idapro.run

IDAPW="your-install-pw-here" make build

2. Enter image container:

make ssh

root@add3b0fd6966:/ida# ./ida64

3. This will open the GUI; Now accept the license agreement and close the window.

4. Copy the ida.reg file to the /data directory and exit container:

root@add3b0fd6966:/ida# cp ~/.idapro/ida.reg /data
root@add3b0fd6966:/ida# exit

5. Move the ida.reg file to the pro folder:

mv data/ida.reg pro/

6. Rebuild the IDA Pro image with the new ida.reg file:

make build-reg

Congratulations! You now have a registered IDA Pro image that you can perform headless analysis with 🎉

Headless

Batch mode (creates idb and asm files)

docker run --init -it --rm \
           --name idapro \
           -v `pwd`:/data \
           blacktop/idapro -B -P+ /data/bin

Autonomous mode

docker run --init -it --rm \
           --name idapro \
           -v `pwd`:/data \
           blacktop/idapro -A -Sanalysis.py /data/bin

NOTE: Here are a list of other CLI options

Issues

Find a bug? Want more features? Find something missing in the documentation? Let me know! Please don't hesitate to file an issue

License

MIT License Copyright (c) 2022 blacktop