Add IntegerDisplayType for IP Address and Port

Open
#6,676 7 comments 4 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
35/100
Issue type
Feature
Clarity
Mostly clear
Activity status
Stale
Tech stack
cpp
Domain
reverse-engineering

Research direction

Start by locating the IntegerDisplayType API and its existing Display As options. Use the referenced Windows sockaddr_in definition to determine how the IP address and port should be interpreted, then verify that both additional options expose those values correctly for embedded sockaddr_in data.

Written by the indexing model from the issue text.

Description

Component: UI Effort: Low Impact: Low

What is the feature you'd like to have?
Have 2 additional Display As options for integer values representing an IP address and Port Number as stored in the Windows socket structure: https://learn.microsoft.com/en-us/windows/win32/api/ws2def/ns-ws2def-sockaddr_in

typedef struct sockaddr_in {
#if ...
  short          sin_family;
#else
  ADDRESS_FAMILY sin_family;
#endif
  USHORT         sin_port;
  IN_ADDR        sin_addr;
  CHAR           sin_zero[8];
} SOCKADDR_IN, *PSOCKADDR_IN;

Is your feature request related to a problem?
Sometime malware will embed a sockaddr_in object in the binary to hide the C2 IP address, having this feature would aid in quickly unmasking what the C2 IP and Port are.

Are any alternative solutions acceptable?

Additional Information:
https://binaryninja.slack.com/archives/C0CVALTLN/p1744937956669339?thread_ts=1744913518.682419&cid=C0CVALTLN

Dominant language
C++
Stars
1.3k
Forks
298
Avg merge
5d 5h
Merged PRs (30d)
19

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from Vector35/binaryninja-api

All issues in Vector35/binaryninja-api

Similar issues

More C++ issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.