Awesome

ida_gpt

ChatGPT loves IDA!

Dependencies

This idapython script requires the unofficial chatgpt api implementation found here.

If you change the server port to something other than 5001, be sure you change it in the idapython script as well!

I also found that dumping a bunch of disassembly into GPT sometimes makes it take a long time. I changed my sleep time in server.py to be 15 seconds just to be safe.

Usage

This is a basic idapython script to get you started with analyzing disassembly with GPT. Load it as a script file or just copy/paste the whole thing into your REPL.

The script has two functions designed for being called on the address of a subroutine:

1. get_description(ea)

This function will provide GPT with the disassembly of the subroutine and request a plain-text description. It is then added to IDA as a function comment.

2. refactor(ea)

This is best called after get_description so GPT has a better understanding of the function. It will request variable and location name suggestions from GPT, as well as a function name. These are then written to your idb.

See it in action!

Here's a video of it renaming some variables, locations, and the function name of an rc4 algorithm in a piece of malware.

You can also see the description comment it created for the function at the top of the IDA window

Obviously there is no quality assurance going on here, trust the analysis of the robot at your own risk. And have fun!