ghidra.fizz

Ghidra: Fizz - Signature Maker Plugin

Brief

This is a simple plugin which can create array of byte signatures for a currently selected area, block, or function.

Demo

Building

Run gradlew.bat

Gradle build outputs can be found in Fizz//dist//ghidra_A.B_PUBLIC_ZZZZYYXX_Fizz.zip

Installing

1. Download the recent release
2. Extract Fizz folder from Zip into GHIDRA_INSTALL_DIR//Ghidra//Extensions//
3. Start Ghidra, a prompt of a new plugin has been found should show
4. Activate prompt and start using

Hotkeys

• Create Ghidra Signature for the Selected Area
  • A + CTRL
• Create Ghidra Signature for the Selected Area's Block
  • B + CTRL
• Create Ghidra Signature for the Selected Area's Function
  • F + CTRL

Todos

• Migrate FizzSignature to MemorySignature and provide modular capabilities
• Find differences regarding address types when iterating and address appropriately
• Fix signature to support both instructions and data at the same time
• Add support for finding an instruction block start to end
• Add support for creating a signature for an instruction block
• Add support for finding a function start to end
• Add support for creating a signature for a function
• Fix block selections for abnormal / mutliconditionals
• Verify block support for non-function blocks
• Integrate with sail after ported over

Developer

• "quosego"

License

This project is licensed under the Apache License 2.0 (Apache-2.0). See the LICENSE.md file for details.