deREferencing

deReferencing is an IDA Pro plugin that implements new registers and stack views. Adds dereferenced pointers, colors and other useful information, similar to some GDB plugins (e.g: PEDA, GEF, pwndbg, etc).

Supports following architectures: x86, x86-64, ARM, ARM64, MIPS32 and MIPS64

Requirements

  • IDA-Pro >= 7.1

Install

Just drop the dereferencing.py file and the dereferencing folder into IDA’s plugin directory.

To install just for the current user, copy the files into one of these directories:

OSPlugin path
Linux/macOS~/.idapro/plugins
Windows%AppData%\Hex-Rays\IDA Pro\plugins

Usage

Both views can be opened from the menu Debugger -> Debugger Windows or by shortcuts:

  • deREferencing – Registers (Alt-Shift-D)
  • deREferencing – Stack (Alt-Shift-E)

You also can save the desktop layout using the Windows -> Save desktop option, so that the plugin starts automatically in other debugging sessions.

Configuration

Config options can be modified vía deferencing/config.py file.

Snapshots

Registers view

Stack view

Thanks

Special mention to my colleague @roman_soft for give me some ideas during the development of the plugin.

Bugs / Feedback / PRs

Any comment, issue or pull request will be highly appreciated 🙂

Author

  • Daniel García Gutiérrez – @danigargu

Pricing
Premium

Author
Daniel García Gutiérrez – @danigargu

Category

Terms
See author’s website