MCP Server Idapro

🚀 IDA Pro Remote Control Plugin

The IDA Pro Remote Control Plugin is a powerful tool that enables remote control of IDA Pro via the HTTP protocol. It offers various functional modules, including string search, function call analysis, export and import table queries, etc., and supports the remote execution of Python scripts.

🚀 Quick Start

The IDA Pro Remote Control Plugin allows you to remotely control IDA Pro via HTTP. Here's how to get started:

✨ Features

• Remote control of IDA Pro via HTTP.
• Multiple functional modules: string search, function call analysis, export and import table queries, etc.
• Support for remote execution of Python scripts.

📦 Installation

1. Download the Plugin: Obtain the latest version of the IDA Pro Remote Control Plugin from the official source.
2. Install the Plugin: Place the plugin file (usually in .py format) in the IDA Pro plugins directory.
3. Configure Parameters: Edit the configuration file to set the default host and port for the plugin. By default, the plugin binds to localhost for security reasons.

💻 Usage Examples

1. Open IDA Pro and load the target executable file.
2. Start the remote control plugin. By default, the plugin will appear as a new window or toolbar in IDA Pro.
3. Interact with the plugin using the provided HTTP API or command - line interface.

Basic Usage

String Search

• Description: Find specific strings in the binary file.
• Parameters
  • text (required): The string to search for.
  • caseSensitive (optional, default: false): Whether to perform a case - sensitive search.
• Example

GET /api/search/text?text=password&caseSensitive=false

Function Call Analysis

• Description: Get the list of functions in the binary file and their call graphs.
• Parameters: None
• Example

GET /api/functions

Export Table Query

• Description: Get the list of exported functions from the target executable file.
• Parameters: None
• Example

GET /api/exports

Import Table Query

• Description: Get the list of external functions imported by the target executable file.
• Parameters: None
• Example

GET /api/imports

Script Execution

• Method: POST
• Path: /api/execute
• Description: Allows users to upload or send Python scripts directly through the POST request body. The plugin will execute these scripts in the IDA Pro environment.
• Example

POST /api/execute HTTP/1.1
Content-Type: application/x-www-form-urlencoded

script=import%20sys\nprint(sys.version)

Advanced Usage

Execute Script by Path

POST /api/executebypath

This API allows you to execute a predefined script based on the file path.

Execute Script by Content

POST /api/executebycontent

This API enables dynamic execution of scripts based on the content of the request body.

📚 Documentation

Basic Interfaces

• GET /api/info: Get plugin information, including the version number and configuration parameters.
• GET /api/disassembly?start=0x401000&count=10: Get the disassembled code within the specified address range.

Advanced Features

• POST /api/executebypath: Execute a predefined script based on the file path.
• POST /api/executebycontent: Dynamically execute a script based on the request body content.

🔧 Technical Details

The plugin is developed by the IDA Pro development team. It uses the HTTP protocol for communication and supports the execution of Python scripts in the IDA Pro environment.

📄 License

This plugin is licensed under the MIT License, which allows users to freely use, modify, and distribute it.

⚠️ Important Note

The plugin is bound to localhost by default. It is not recommended to use the default configuration on a public network. If remote access is required, ensure the security of the target machine and encrypt the communication via HTTPS.

💡 Usage Tip

Community developers are welcome to submit Pull Requests or report issues.