This versatile, customizable, and powerful disassembler and debugger solution is widely recognized as the industry standard for analyzing malicious code, conducting vulnerability research, and validating multiple Commercial Off-The-Shelf (COTS) products.
The IDA Pro Disassembler and Debugger is an interactive, programmable, extendible, multi-processor disassembler hosted on Windows, Linux, or Mac OS X. IDA Pro has become the de-facto standard for the analysis of hostile code, vulnerability research and COTS validation.
v6.1 [Sep 19, 2011]
Support for Android
The long awaited Android support in IDA is ready!
The new version can disassemble Android bytecode (Dalvik).
An IDA user kindly contributed the processor module and file loader
Native ARM code can be debugged too.
IDA Pro supports mixed ARM/Thumb code and can handle multithreaded applications
-64-bit support for Bochs/GDB debuggers
The Bochs emulating debugger is very handy for small snippets of code. Before we could handle only 32-bit code but the new version adds 64-bit support.
#
Currently only the IDB mode is supported, later we plan to add PE support as well.
The GDBServer module adds x64 support and works with the latest VMWare versions.
-Loading PDB files under Linux/MacOSX
Another long awaited feature is loading of PDB files under Linux and Mac OS X. Lack of this feature was a blocking factor for many Unix users. It is available now. Below is a screenshot made immediately after loading a PE file with PDB info on Linux.#
We added PDB support to the win32 debugger server. The Unix version of IDA connects to a remote MS Windows computer (or local Wine session) and retrieves PDB information from it.
- String encodings
Not only Unicode, but other character encodings can be displayed in the disassembly listing. It is even possible to specify the encoding of individual strings.
Low level conditional breakpoints
Conditional breakpoints can be very slow, especially during remote debugging. We addressed this problem by creating server side low level conditional breakpoints. They speed up the debugger tremendously. In our tests breakpoints were handled more than 20 times faster, even when running the remote server on the same computer as IDA Pro. Low level breakpoints are beneifical even for local debugging, so they are available for local debuggers too
The Remote Debugger Installation is intended for computers without Visual Studio
