2015/10/28

QIRA introduction

image from qira.me website


  • QIRA is timeless debugger
  • Fullname is QEMU Interactive Runtime Analyser
  • QIRA was initially developed at Google by George Hotz. Work continues at CMU.

QIRA website :

http://qira.me/

QIRA github :

https://github.com/BinaryAnalysisPlatform/qira

Usage

Usage

How to make ida plugin work

  • Testing environment is on Windows 10 enterprise with Vmware workstation Pro 12
  • Install qira 1.1 on Ubuntu 15.10 and port-forwarding 3002 port
  • Quick install qira and google-chrome can by following script
- git clone https://github.com/bananaappletw/Ubuntu
cd Ubuntu/
./install.sh
  • And copy two files qira_ida66_windows.p64, qira_ida66_windows.plw from qira/ida/bin/ to ida pro plugins/
  • Open Chrome and IDA PRO on windows 10
  • It should work like this

ida plugin

4 則留言:

  1. Is it about debugging linux version of chrome? If not can you describe in detail debugging chrome with qira?

    回覆刪除
  2. http://bananaappletw.github.io/2016/03/22/qira-introduction/

    content is the same as https://github.com/BinaryAnalysisPlatform/qira

    Here is geohot's video.

    https://www.youtube.com/watch?v=eGl6kpSajag


    You should try to analyze binary by yourself.

    It's hard to explain how to use it.

    I think it's better to work with IDA PRO.

    You could debug and watch source code simultaneously.

    回覆刪除
  3. 作者已經移除這則留言。

    回覆刪除
    回覆
    1. Never use wine to simulate IDA PRO.

      I used once,but only work for 32 bits.

      Use IDA PRO on Windows is more proper.


      刪除