Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Package proposal: bochs.vm #897

Open
av-gantimurov opened this issue Feb 12, 2024 · 7 comments
Open

Package proposal: bochs.vm #897

av-gantimurov opened this issue Feb 12, 2024 · 7 comments
Labels
🌀 FLARE-VM A package or feature to be used by FLARE-VM 🆕 package New package request/idea/PR

Comments

@av-gantimurov
Copy link

av-gantimurov commented Feb 12, 2024

Package Name

bochs

Tool Name

Bochs

Package type

OTHER (installer)

Is the tool a console application?

false

Tool's version number

2.7

Category

Debuggers

Tool's authors

Donald Becker, Greg Alexander, Christophe Bothamy, Volker Ruppert, Bryce Denney, Stanislav Shwartsman

Tool's description

Bochs is a portable x86 PC emulation software package that can be used as debugger in IDA Pro (Local Bochs debugger).

Download URL

https://netcologne.dl.sourceforge.net/project/bochs/bochs/2.7/Bochs-win64-2.7.exe

Download SHA256 Hash

a7428585b30ec3633c00bd38ef9dbb2d6c91cb4c29daa39a3c9b6b89e719ba90

Dependencies

No response

Why is this tool a good addition?

After installing Bochs may be used as Local Bochs Debugger in IDA Pro. IDA Pro has special Bochs debugger for x86 an x64 code (https://hex-rays.com/products/ida/support/idadoc/1329.shtml).

Additional information about using bochs debugger with IDA Pro in old Hex-Rays article.

@av-gantimurov av-gantimurov added the 🆕 package New package request/idea/PR label Feb 12, 2024
@Ana06 Ana06 added the 🌀 FLARE-VM A package or feature to be used by FLARE-VM label Feb 12, 2024
@Ana06
Copy link
Member

Ana06 commented Feb 12, 2024

@av-gantimurov thanks for the proposal! 👍 The provided hash is not an SHA256 hash, can you please update the issue description with the correct hash?

Can you please also provide a link to the IDA plugin in #719? 😃

@av-gantimurov
Copy link
Author

av-gantimurov commented Feb 13, 2024

@av-gantimurov thanks for the proposal! 👍 The provided hash is not an SHA256 hash, can you please update the issue description with the correct hash?

Can you please also provide a link to the IDA plugin in #719? 😃

I wrote MD5 instead of SHA256. Fixed.
IDA Pro supports local bochs debugger without any extra plugins by default. Worked with IDA 8.3 on Windows 10 without fault.
I added some links with information about using Bochs debugger in first message.

@Ana06 Ana06 added the send PR Triggers a workflow that send a PR for the package issue label Feb 14, 2024
@github-actions github-actions bot removed the send PR Triggers a workflow that send a PR for the package issue label Feb 14, 2024
vm-packages added a commit that referenced this issue Feb 14, 2024
@Ana06
Copy link
Member

Ana06 commented Feb 14, 2024

I wrote MD5 instead of SHA256. Fixed.

Our bot processes the package proposals and send a PR for it when we add the send PR label, but the information needs to be accurate/as expected. That's why we can't use the MD5 hash. Thanks for correcting it. As you can see, our bot has already send a PR 😉

IDA Pro supports local bochs debugger without any extra plugins by default. Worked with IDA 8.3 on Windows 10 without fault.
I added some links with information about using Bochs debugger in first message.

We will add Bochs without without the plugin and close this issue. So I was proposing you suggest/document the Bosch plugin in the existent issue about plugins additions so that we don't forget about it and we get it in as well. We don't have automation for plugins (yet). 😄

@Ana06
Copy link
Member

Ana06 commented Feb 14, 2024

@mandiant/flare-vm should we add bochs to the default flare-vm installation? I think so, I would like to be able to use Bochs in IDA. 🤔 Opinions?

@Ana06
Copy link
Member

Ana06 commented Feb 14, 2024

Sadly the package type was not correct, the downloaded exe is not the tool itself but an installer and our bot does not support this package type (yet). Does someone want to send a PR for this one? 😄

@av-gantimurov
Copy link
Author

@mandiant/flare-vm should we add bochs to the default flare-vm installation? I think so, I would like to be able to use Bochs in IDA. 🤔 Opinions?

Bochs supported only in IDA Pro, IDA Home and IDA Free has only local debugger (+GDBServer in IDA Home).

@Ana06
Copy link
Member

Ana06 commented Feb 19, 2024

Bochs supported only in IDA Pro, IDA Home and IDA Free has only local debugger (+GDBServer in IDA Home).

Good point! I do use IDA Pro 😄 We even have tools in the default configuration that only work with IDA Pro and not outside IDA like the capa plugin (ida.plugin.capa.vm) that needs python. I think it is nice that is there after I install IDA Pro in a VM with FLARE-VM. 😉

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🌀 FLARE-VM A package or feature to be used by FLARE-VM 🆕 package New package request/idea/PR
Projects
None yet
Development

No branches or pull requests

2 participants