Page cover
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Examples

This page showcases real-world tools and projects built on idalib.

idasql

allthingsida/idasql: a SQL interface for IDA Pro databases, created by Elias Bachaalany. It exposes 30+ virtual tables covering functions, cross-references, strings, types, imports, disassembly, and decompilation.

idasql

capa

mandiant/capa: a malware analysis tool for automatically extracting capabilities from malware. The idalib backend lets capa run headlessly against binaries without launching IDA's GUI.

capa loader

idals

williballenthin/idawilli/idals: an IDA Pro-powered command-line tool for binary inspection. Run idals /path/to/binary [<address or name>] to display what IDA shows at that address.

idals

Last updated

Was this helpful?