IDAssist  by symgraph

AI-powered reverse engineering for IDA Pro

Created 1 month ago
378 stars

Top 75.2% on SourcePulse

GitHubView on GitHub
Project Summary

Summary IDAssist is an IDA Pro plugin integrating LLMs for enhanced binary reverse engineering. It targets security researchers and engineers using IDA Pro, offering AI-assisted code analysis, function explanations, interactive Q&A, automated renaming, and a semantic knowledge graph to accelerate binary understanding.

How It Works Operating as a dockable panel within IDA Pro 9.0+ (Python/PySide6), IDAssist connects to diverse LLM providers (OpenAI, Anthropic, Ollama, LiteLLM). It analyzes decompiled functions, suggests renames, answers code queries, and builds a searchable knowledge graph. Its approach includes RAG for document search and an optional ReAct agent for autonomous, multi-round investigations, enabling deeper insights and automated analysis directly within IDA.

Quick Start & Requirements

  • Installation: Recommended via hcli plugin install idassist. Manual installation requires extracting a release tarball to IDA's plugins directory and installing dependencies using IDA's bundled Python.
  • Prerequisites: IDA Pro 9.0+ with Python 3 and PySide6. Hex-Rays Decompiler is highly recommended for pseudocode features.
  • Dependencies: Python packages from requirements.txt.
  • Links: Homepage: https://symgraph.ai. Detailed setup is in the "Getting Started" documentation section.

Highlighted Details

  • Function Explanation: Generates natural-language explanations with security analysis (risk, API detection).
  • Interactive Query Chat: Enables code Q&A with context macros and persistent history.
  • Automated Actions: AI-driven rename suggestions for code elements, with confidence scores and review.
  • Semantic Knowledge Graph: Builds and explores a graph of binary functions, calls, data flows, and security traits, featuring visual rendering and semantic search.
  • RAG Document Search: Integrates uploaded reference documents (.txt, .md, .rst, .pdf) via Whoosh indexing.
  • ReAct Agent: Autonomous agent for multi-round investigations, planning, tool execution, and reflection.
  • MCP Integration: Connects to external MCP servers for tool-augmented LLM interactions.
  • RLHF Feedback: Local feedback mechanism to improve prompt engineering and model selection.

Maintenance & Community No specific details regarding notable contributors, sponsorships, or community channels (e.g., Discord, Slack) were found in the provided README text.

Licensing & Compatibility License details are in the LICENSE file. Compatibility requires IDA Pro 9.0+; Hex-Rays Decompiler is recommended.

Limitations & Caveats Dependent on IDA Pro 9.0+. Hex-Rays Decompiler recommended for full features. Setup requires LLM provider configuration, potentially involving API keys or local hosting. The README does not specify alpha/beta status or list known bugs.

Health Check
Last Commit

2 days ago

Responsiveness

Inactive

Pull Requests (30d)
1
Issues (30d)
6
Star History
259 stars in the last 30 days

Explore Similar Projects

Feedback? Help us improve.