ida for mac 插件配置 tips


sudo pip install yara-python,不行下载安装

vim /usr/local/lib/python2.7/site-packages/yara/


    #dllpath = os.path.join(sys.prefix, 'lib')
    dllpath = os.path.join("/usr/local/Frameworks/Python.framework/Versions/2.7/", 'lib')
    library = os.path.join(dllpath, '')



A2. MacOS

The macOS python is universal binary, so does not need to discuss the situation(x86, x64).

Compiling dynamic library(libkeystone.dylib) depends on cmake and compiler(llvm clang, gcc).

Quick start steps:

Install the core & Python module of Keystone with the following command:

  • install brew
    /usr/bin/ruby -e "$(curl -fsSL"
  • install cmake
    brew install cmake
  • install keystone-engine
    sudo pip install keystone-engine
    • Check Method ( Whether the installation is successful? ):
      • You enter this in the console of idaNormal result:
        Python>print keystone 
        <module 'keystone.keystone' from '/Applications/IDA Pro 7.0/'> Python>print keystone.arm_const <module 'keystone.arm_const' from '/Applications/IDA Pro 7.0/'>


      • enter this in the python standard consoleNormal result:
        Python 2.7.13 (default, Jul 18 2017, 09:17:00) 
        [GCC 4.2.1 Compatible Apple LLVM 8.1.0 (clang-802.0.42)] on darwin Type "help", "copyright", "credits" or "license" for more information. 
        >>> import keystone 
        >>> print keystone 
        <module 'keystone' from '/usr/local/lib/python2.7/site-packages/keystone/__init__.pyc'> >>> print keystone.arm_const <module 'keystone.arm_const' from '/usr/local/lib/python2.7/site-packages/keystone/arm_const.pyc'> >>>


If there are cmake and compiler, then install only the core & Python module of Keystone with the following command:

$ sudo pip install keystone-engine


电子邮件地址不会被公开。 必填项已用*标注