网站 › 『逆向资源区』 › Finger：一款函数符号识别插件

风吹屁屁凉 发表于 2022-4-27 17:16

Finger：一款函数符号识别插件

本帖最后由 风吹屁屁凉 于 2022-4-27 17:19 编辑

# Finger
Finger, a tool for recognizing function symbol.

## Overview
Finger is a function symbol recognition engine for binary programs developed by Alibaba Cloud · Cloud Security Technology Lab, which aims to help security researchers identify unknown library functions in a given binary file.
Finger provides two ways to access core APIs of Finger function symbol recognition engine.

## Running environment
Now, Finger support python 2.7 and python 3, and requires IDA version >= 7.0.

## Finger python SDK
The python version must be the same as your IDAPython version.
~~~
pip install finger_sdk
~~~
After installing finger python SDK, you can check out the finger/exampls/recognize.py for more information.

## Finger IDA Plugin
Copy plugin/finger_plugin.py to your IDA_PATH/plugins path.
### upload function
The Finger IDA plugin supports single function, selected function, and all functions recognition. You can recognize function symbols in the menu bar, disassembly window, and function window.

Use Finger IDA plugin in the menu bar:
!(https://raw.githubusercontent.com/aliyunav/Finger/master/images/1.png)

Use Finger IDA plugin in the disassembly window:
!(https://raw.githubusercontent.com/aliyunav/Finger/master/images/2.png)

Use Finger IDA plugin in the function window:
!(https://raw.githubusercontent.com/aliyunav/Finger/master/images/3.png)

### function symbol presentation
The successfully recognized function symbols will be highlighted in the disassembly window and function window.
!(https://raw.githubusercontent.com/aliyunav/Finger/master/images/4.png)

https://sec-lab.aliyun.com/2021/10/15/Finger%EF%BC%9A%E4%B8%80%E6%AC%BE%E5%87%BD%E6%95%B0%E7%AC%A6%E5%8F%B7%E8%AF%86%E5%88%AB%E7%A5%9E%E5%99%A8/
https://github.com/aliyunav/Finger/

hjw01 发表于 2022-4-28 20:02

i like it. in development,it is very useful. thank

sunyx816 发表于 2022-4-27 17:42

If there is no translation, I can't understand it, or I am too young and should learn English

DrCatcher 发表于 2022-4-27 17:22

Thanks a lot. Sir.

xiaoyu2032 发表于 2022-4-27 17:46

有人试用过吗？效果怎么样？

wuyongkui 发表于 2022-4-27 20:15

函数，还是先谢谢楼主

nihaohello1 发表于 2022-4-27 20:20

给个大大的赞

bdrdc 发表于 2022-4-27 20:21

这个不错，好好研究研究.......

hacker922 发表于 2022-4-27 20:40

一看就相当的专业啊 全英文啊

未知、 发表于 2022-4-27 21:46

有点慢啊，已经有符号的函数，能不识别吗?

ehcapa 发表于 2022-4-27 22:37

收藏备用，感谢楼主

查看完整版本: Finger：一款函数符号识别插件