Immunity Debugger: signatures scanner

It is time to publish a plugin I wrote some time ago, but it is still really useful, I’m planning to release an updated version in the near future 🙂

immSignSrch is a signatures scanner plugin for Immunity Debugger developed upon Luigi Auriemma’s signSrch.

Features:

Fast search engine;
It can recognize:
–  tons of compression, multimedia and encryption algorithms;
–  many other things (like known strings and anti-debugging code).
Signatures DB automatically updatable from the program itself and editable by hand.

iss_sc1

iss_sc2
Usage:

From the command line (ALT + F1) type: !iss -h

Download:

Latest release of immSignSrch is available here.

Have fun :)

Advertisements


%d bloggers like this: