deREferencing

deReferencing is an IDA Pro plugin that implements new registers and stack views. Adds dereferenced pointers, colors and other useful information, similar to some GDB plugins (e.g: PEDA, GEF, pwndbg, etc).

Supports following architectures: x86, x86-64, ARM, ARM64, MIPS32 and MIPS64

Requirements

• IDA-Pro >= 7.1

Install

Just drop the dereferencing.py file and the dereferencing folder into IDA's plugin directory.

To install just for the current user, copy the files into one of these directories:

| OS | Plugin path | | ----------- | ------------------------------------ | | Linux/macOS | ~/.idapro/plugins | | Windows | %AppData%\Hex-Rays\IDA Pro\plugins |

Usage

Both views can be opened from the menu Debugger -> Debugger Windows or by shortcuts:

• deREferencing - Registers (Alt-Shift-D)
• deREferencing - Stack (Alt-Shift-E)

You also can save the desktop layout using the Windows -> Save desktop option, so that the plugin starts automatically in other debugging sessions.

Configuration

Config options can be modified vía deferencing/config.py file.

Snapshots

Registers view

Stack view

Thanks

Special mention to my colleague @roman_soft for give me some ideas during the development of the plugin.

Bugs / Feedback / PRs

Any comment, issue or pull request will be highly appreciated :-)

Author

• Daniel García Gutiérrez - @danigargu