taida957789_ida_mcp_server_plugin
by taida957789IDA Pro MCP Server Plugin for Claude Integration
Overview
The IDA Pro MCP Server Plugin enables seamless integration between IDA Pro and AI assistants like Claude through the Model Context Protocol (MCP). This plugin allows remote querying and control of IDA Pro, empowering AI tools to perform advanced binary analysis tasks directly within the IDA environment.
Key Features:
- Retrieve byte data, disassembly, and decompiled pseudocode.
- Query function names, segment information, and cross-references.
- Access import/export tables and entry points.
- Define/undefine functions and extract various data types.
- Analyze strings and instruction lengths in binary files.
Installation
Note: This plugin is compatible with IDA Pro version 9.0+.
- Install Python dependencies:
shell pip install -r requirements.txt - Copy
ida-mcp-server.pyto the IDA Pro plugins directory: - Windows:
%Programfiles%\IDA Pro 9.0\plugins\ - Linux:
~/.idapro/plugins/ - macOS:
~/Library/Application Support/IDA Pro/plugins/
Configuration for Claude / VSCode
Add the following configuration to your mcp.json file:
{
"mcpServers": {
"IDAPro": {
"url": "http://127.0.0.1:3000/sse",
"type": "sse"
}
}
}
Usage
- Open a binary file in IDA Pro.
- The plugin will automatically start the MCP server on port 3000.
- Connect your AI assistant (e.g., Claude) to the server.
- Use the AI assistant to perform binary analysis tasks.
Available Analysis Tools
The plugin provides the following tools for AI-assisted analysis:
- get_bytes: Retrieve bytes at a specified address.
- get_disasm: Fetch disassembly at a given address.
- get_decompiled_func: Obtain pseudocode for a function.
- get_function_name: Retrieve the name of a function.
- get_segments: List all segments in the binary.
- get_functions: Enumerate all functions.
- get_xrefs_to: Find cross-references to an address.
- get_imports: List imported functions.
- get_exports: List exported functions.
- get_entry_point: Retrieve the binary’s entry point.
- make_function: Define a function at an address.
- undefine_function: Undefine a function.
- get_dword_at, get_word_at, get_byte_at, get_qword_at, get_float_at, get_double_at, get_string_at: Extract specific data types.
- get_string_list, get_strings: Retrieve all strings in the binary.
Best Practices
For effective binary analysis, follow these steps:
1. Examine the entry point.
2. Analyze the import table.
3. Review strings.
4. Track key API calls.
5. Identify main functional blocks.
6. Analyze control flow.
7. Identify malicious behaviors.
8. Analyze algorithms and encryption routines.
9. Document analysis results.
10. Use advanced techniques.
License
This project is licensed under the MIT License. See the LICENSE file for details.
About
This plugin serves as an MCP SSE server for IDA Pro, enabling integration with AI tools like Claude. It is developed to enhance binary analysis workflows through AI-assisted automation.
Invite Gmail Contacts
