IDA pro plugin to find crypto constants (and more)
If yara is not already installed on your system, install the yara-python
package with pip
.
Do not install the yara
pip package; it is not compatible with this plugin.
Custom rule files can be stored in :
$HOME/.idapro/plugins/findcrypt-yara/*.rules
under Linux and MacOS.%APPDATA%\\Roaming\\Hex-Rays\\IDA Pro\\plugin\\findcrypt-yara\\*.rules
under Windows.