deREferencing

deReferencing is an IDA Pro plugin that implements new registers and stack views. Adds dereferenced pointers, colors and other useful information, similar to some GDB plugins (e.g: PEDA, GEF, pwndbg, etc).

Supports following architectures: x86, x86-64, ARM, ARM64, MIPS32 and MIPS64

Requirements

• IDA-Pro >= 7.1

Install

Install with hcli:

hcli plugin install dereferencing

Alternatively, install manually by dropping the dereferencing.py file and the dereferencing folder into IDA's plugin directory.

For a user-local manual installation, copy the files into the appropriate plugin directory:

Usage

Both views can be opened from the menu Debugger -> Debugger Windows or by shortcuts:

• deREferencing - Registers (Alt-Shift-D)
• deREferencing - Stack (Alt-Shift-E)

You also can save the desktop layout using the Windows -> Save desktop option, so that the plugin starts automatically in other debugging sessions.

Configuration

Config options can be modified vía deferencing/config.py file.

Snapshots

Registers view

Stack view

Thanks

Special mention to my colleague @roman_soft for give me some ideas during the development of the plugin.

Bugs / Feedback / PRs

Any comment, issue or pull request will be highly appreciated :-)

Author

• Daniel García Gutiérrez - @danigargu