Awesome

findcrypt-yara

IDA pro plugin to find crypto constants (and more)

Installation Notes

If yara is not already installed on your system, install the yara-python package with pip.

Do not install the yara pip package; it is not compatible with this plugin.

User-defined rules

Custom rule files can be stored in :

• $HOME/.idapro/plugins/findcrypt-yara/*.rules under Linux and MacOS.
• %APPDATA%\\Roaming\\Hex-Rays\\IDA Pro\\plugin\\findcrypt-yara\\*.rules under Windows.