Vector35 / Vector35/binaryninja-api

More metadata in the strings list

Open
#7,320 0 comments 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Component: UI Effort: Medium Impact: Medium UI: Strings
Dominant language
C++
Stars
1.3k
Forks
298
Avg merge
5d 5h
Merged PRs (30d)
19

Description

What is the feature you'd like to have?
Additional data in new columns in the strings view:

  1. Section name
  2. Memory region name (from memory map)
  3. Function symbol name (if in function)
  4. Struct name (if within a struct)
  5. Data symbol name (if within a data symbol)
  6. List of any tags on addresses that fall within the range of addresses inside the string. These can even just be a row of emoji from the tags that can be hovered to see the tag content. This would allow for full parity with quantumstrand including the row with #common, #code-junk, and #winapi as examples from the screenshot below.

Is your feature request related to a problem?
More information and context about individual strings.

Additional Information:
Mandiant QUANTUMSTRAND
Image

https://github.com/mandiant/flare-floss/releases/tag/quantumstrand-beta1

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start at the strings view and trace how string address ranges connect to section names, the memory map, function and data symbols, structs, and address tags. The work is done when the strings list exposes the requested metadata columns and tags, including the listed example tags where applicable.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
reverse-engineering
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.