mr

mrexodia/ida-pro-mcp

๐Ÿ ๐Ÿ  MCP server for IDA Pro, allowing you to perform binary analysis with AI assistants. This plugin implement decompilation, disassembly and allows you to generate malware analysis reports automatically.

#IDA Pro#binary analysis#malware analysis
Publishermrexodia/ida-pro-mcp
Submitted date4/19/2025

Overview: IDA Pro MCP

Title

IDA Pro MCP โ€“ A Simple MCP Server for Reverse Engineering in IDA Pro

How to Use

  1. Installation:

    • Ensure prerequisites (Python 3.11+, IDA Pro 8.3+, supported MCP client) are met.
    • Install via pip:
      pip install --upgrade git+https://github.com/mrexodia/ida-pro-mcp
    • Configure MCP servers and install the IDA plugin:
      ida-pro-mcp --install
    • Restart IDA and your MCP client for changes to take effect.
  2. Prompt Engineering:

    • Use structured prompts to guide LLMs in analyzing binaries (e.g., renaming variables, setting types, avoiding number base conversions).

Key Features

  • Core Functions:

    • Retrieve metadata, functions, strings, and cross-references.
    • Decompile/disassemble functions and manage comments.
    • Rename variables/functions and set types.
  • Tool Integration:

    • Supports MCP clients like Cline, Roo Code, Claude, and VSCode Agent Mode.
    • Compatible with tools like math-mcp for complex calculations.
  • Optimization Tips:

    • Pre-process binaries to remove obfuscation (e.g., string encryption, control flow flattening).
    • Use Lumina/FLIRT to resolve library code for better accuracy.

Use Cases

  • Reverse Engineering:

    • Analyze crackmes by renaming symbols, annotating decompilation, and generating reports.
    • Collaborate with LLMs to interpret disassembly (e.g., deriving solutions without brute-forcing).
  • Automation:

    • Streamline repetitive tasks (e.g., bulk renaming, type setting) via MCP commands.
  • Education:

    • Teach binary analysis by leveraging LLM-generated insights and structured prompts.

For advanced users, manual installation and server configuration are also supported.


Resources:

Visit More

View All