provocativo_
back to the arsenal
// arsenal·Forensics & REAdvancedCommercial

IDA Pro

Hex-Rays' interactive disassembler and decompiler — the longstanding RE gold standard.

Forensics & RE

$ ida-pro --help

IDA Pro

// what it is

Description

The defining commercial reverse-engineering platform. Decompilers for x86/x64, ARM/ARM64, MIPS, PowerPC, and more. Pricey full license; free IDA Home is restricted but workable.

// use cases

What people use it for

  • Professional malware analysis
  • Vulnerability research
  • Exploit development

// facts

category
Forensics & RE
platforms
LIN · WIN · MAC
license
Commercial
difficulty
Advanced

// links

// related in Forensics & RE

Forensics & REAdvanced

Volatility

Open-source memory-forensics framework — reads RAM images and reconstructs system state.

FOSS
LIN·WIN·MAC
open entry →
Forensics & REIntermediate

Autopsy

Open-source digital-forensics GUI on top of The Sleuth Kit.

FOSS
LIN·WIN·MAC
open entry →
Forensics & REBeginner

FTK Imager

Exterro's free disk-imaging utility — the de facto standard for forensic disk capture.

Freemium
WIN·MAC
open entry →