Nampa - FLIRT for (binary) ninjas

Pure-python implementation of IDA Pro's FLIRT technology. Also Binary Ninja plugin.

Description

Nampa is a package for reading IDA Pro's .sig files. It comes with its own command-line tool for analyzing such files: dumpsig.py.

Nampa the package is completely decoupled from the Binary Ninja plugin.

Nampa the plugin comes with a small library of .sig files, automatically downloaded from 3rd-party GitHub repositories when needed.

Screenshot

Installation

For use as a python library:

pip install nampa

For use as a Binary Ninja plugin:

cd ~/.binaryninja/plugins/
git clone git@github.com:thebabush/nampa.git
cd nampa
pip install -r requirements.txt # or sudo apt-get install python-future

NOTE: apparently, Binary Ninja for Windows ships with its own python distribution so pip install accordingly.

About

Meaning of Nampa (ナンパ).

Limitations

Ref functions are not implemented at the moment.

Thanks

radare people, since this is basically a python port of radare's FLIRT implementation.
trib0r3 for updating the Binary Ninja integration

License

The original radare's flirt.c is under LGPL, so my deep knowledge of software licenses tells me that I must keep it that way.