Home

Awesome

idamagnum

idamagnum is a plugin for integrating MagnumDB requests within IDA

Installation

Just drop the single Python file idamagnum_plugin.py into IDA's plugin directory.

Usage

IDA is shipped with a pretty limited number of standard enums. Usually, when typing M on an unknown enum, the following disappointment happen :

<p align="center"> <img alt="no enum found" src="screenshots/tristesse1.PNG"/> <img alt="really, there is no enum" src="screenshots/tristesse2.PNG"/> </p>

Fortunately, a wonderful person decided to take on the ungrateful task of extracting all "magic" constants from various Microsoft Kits (SDK, WDK, DotNet Core, etc.) and setting up a website to query them : https://magnumdb.com.

Thanks to this plugin, you can now query the MagnumDB by typing Shift-M when selecting an unknown constant. A chooser menu should pop up (kinda like M shortcut) populated with values from MagnumDB:

<p align="center"> <img alt="choose, baby choose" src="screenshots/choose_from_magnumdb.PNG"/> </p>

Once the enum selected, the plugin automatically tag the constant with the correct name:

<p align="center"> <img alt="yes" src="screenshots/success.PNG"/> </p>

Credits

Simon Mourier for creating MagnumDB.com and helping me quering it from IDA.