mtivadar / qiew Goto Github PK
View Code? Open in Web Editor NEWHome of Qiew - Reverse engineering tool
License: GNU General Public License v2.0
Home of Qiew - Reverse engineering tool
License: GNU General Public License v2.0
Qiew wasn't tested on MAC OS X. It should work, hopefully with minor modifications.
Investigate
http://www.capstone-engine.org/
seems to be a more potent disassambler
useful for ctrl+shift+end to select till the eof
Similar to #21, I would like to use 'e' (end) to jump over all characters until a QWORD == \0.
pagedown goes out of the page when reached eof.
it crashes when user makes the window very small (in hexview for example), because hexcolumns goes outside window.
Last byte in file can't be selected using shift+arrows.
something that shows the progress in file. simple or something more complex with metadata showing sections, IAT, resources
Use / to show a search window.
It should support searching for string (both normal and unicode at the same time) and hex. If you open the window a second time it should remember the last search value and the last search mode (string/hex).
Pressing n should be search next, and maybe N search previous. I'm not so set ATM on N :)
apk plugin has to be finished:
functionalities:
permissions/services/activities/receivers/providers
zip files (can hit enter and will open another qiew window)
banners contains info from apk
info from dex file? or this one could be another module..
when mbr plugin is loaded and in hexview mode, if you go pageup/pagedown, mbrsignature 0x55aa seems to be far away from partition selection. seems to be a problem with text selection.
What are the implications using Qt, distorm, terminus, yaspi, pefile ?
Currently mbr plugins sets address start to 0x7c00. We should change this with F3 ti switch from FileAddress and LoadAddress, and goto (alt+g) should also have fileaddress/memaddress. Currently goto works with memaddress
Qiew can't open files that are locked for writing.
File "C:\tools\qiew\qiew\DataModel.py", line 173, in __init__
self._f = open(filename, "r+b")
IOError: [Errno 13] Permission denied: 'C:\\Windows\\explorer.exe'
should have at least minimal support for the beginning
It would also be nice to have 'insert' mode, growing the data size.
It would be really necessary for reversing structures and protocols
When I resize the window from small to bigger, paint signal is not received. only when the cursor is moved
it works only with small fonts (form windows display)
shouldn't care about that
decryption/encryption
basic XOR, bit rotates, ROT13, RC4 ?
0 was jumping to overlay. Either add a shortcut or maybe add the overlay in the PE plugin Sections tab.
1,2,3,4 could jump to the first, second,... section.
it would be nice to have it in all views
This is probably a leftover from Python 2. find is no longer available in the Python string module. Consequently, the following error occurs:
[+] binary
[+] elf
Choosed plugin: elf
Traceback (most recent call last):
File "/home/alex/work/qiew/plugins/format/elf.py", line 101, in skip_block
x = string.find(self.dataModel.getData(), '\x00'*8, off)
AttributeError: module 'string' has no attribute 'find'
I found the bug in plugins/format/elf.py, but the same piece of code is used in plugins/format/ntfs.py.
I'm going to make a PR for the fix.
Add the underscore (_) to the list of characters recognized as strings.
Maybe also < and > ?
also, add some info about it maybe
Should display sleected region, adn any other info, for exemple display when copied to clipboard
If font is scaled (200%) , exception is thrown on drowing: y > cols
We need a way to signal current operational modes. For examples to signal RVA/FA/VA, to signal View/Edit mode and so on...
dd if=/dev/zero of=zzz bs=1M count=20
qiew.py zzz
press s
wait... wait...
I had a 24MB file today and I wanted to see if it only contains 0s but this was to slow.
The competitor product takes under 0.5 seconds I would say.
.
File "C:\tools\qiew\qiew\qiew.py", line 223, in __init__
self.searchWindow = SearchWindow(self, None, self.searchable)
File "C:\tools\qiew\qiew\qiew.py", line 587, in __init__
self.ui = PyQt4.uic.loadUi(os.path.join(root, 'search.ui'), baseinstance=self)
...
IOError: [Errno 2] No such file or directory: 'C:\\tools\\qiew\\qiew\\search.ui'
elf support is minimal, should do more.
What is the status of this project?
If I'm pressing 's' I am expecting to jump over all characters that are equal to the current char. For example to skip big zones that are filled with \0s.
it should be nice to have some referenced strings and branch arrows and symbols (api calls)
Just a quick reminder that 4.40 is available: http://sourceforge.net/projects/terminus-font/files/terminus-font-4.40/terminus-font-4.40.exe/download
it help to rapidly screen the file
seems that: thumb mode is not correctly recognized
Create wiki and app documentation, shortcuts, plugins, etc
probably current section, header (IAT) for example. overlay, selection, etc
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.