The Beginner's Guide to IDAPython - Alexander Hanel
This is a book about IDAPython.
I originally wrote it as a reference for myself - I wanted a place to go to where I could find examples of functions that I commonly use (and forget) in IDAPython. Since I started this book, I have used it many times as a quick reference to understand syntax or see an example of some code - if you have read my blog1 you may notice a few familiar faces - lots of scripts that I cover here are result of sophomoric experiments that I documented online.
Over the years I have received numerous emails asking what the best guide for learning IDAPython is. Usually I point them to Ero Carrera's Introduction to IDAPython or the example scripts in the IDAPython's public repo2. They are excellent sources for learning, but they don't cover some common issues that I have come across. I wanted to create a book that addresses these issues. I feel this book is of value for anyone learning IDAPython or wanting a quick reference for examples and snippets. Being an e-book, it will not be a static document and I plan on updating it in the future on regular basis.
Table of Contents and closing added
Grammar fixes provided by Russell V. and added an example of renaming operands.
Support for IDAPython 7.0
Bug fixes provided by Minh-Triet Pham Tran @MinhTrietPT
Converted format from Markdown to Microsoft Word.
Yara chapter added
Coloring chapter added
Structure chapter added
Enumerated Types chapter added
What’s next chapter added
Fixed bug found by @qmemcpy
Added MakeFunction as requested by Minh-Triet Pham Tran