IDA MCP配置

OVVO233 · 发表于 2025-4-16 16:32

本帖最后由 OVVO233 于 2025-4-16 16:36 编辑

1.参考

mrexodia/IDA-pro-mcp: MCP Server for IDA Pro

ida pro mcp 强大的 IDA MCP 插件，AI 助力逆向分析 - 吾爱破解 - 52pojie.cn

本篇是对ida pro mcp 强大的 IDA MCP 插件，AI 助力逆向分析 - 吾爱破解 - 52pojie.cn 的尝试和部署细节补充

2. 安装程序

Node.js
git
vscode(插件这里选择cline)
python >= 3.11 (github要求大于3.11, 但3.12尝试不成功,建议3.11)pip install uvpip install --upgrade git+https://github.com/mrexodia/ida-pro-mcpida-pro-mcp --install
IDA >= 8.3 ,并且python要求指向上面的python(通过目录下的idapyswitch.exe进行切换)上面配置完成后打开IDA---edit---plugins理应会有MCP,点击启动

3.Vscode--cline配置
打开vscode的cline插件配置MCP服务器



粘贴下面内容:

[Asm] 纯文本查看 复制代码

{
  "mcpServers": {
    "github.com/mrexodia/ida-pro-mcp": {
      "command": "uv",
      "args": [
        "--directory",
        "c:\\MCP\\ida-pro-mcp", 
        "run",
        "server.py",
        "--install-plugin"
      ],
      "timeout": 1800,
      "disabled": false,
      "autoApprove": [
        "check_connection",
        "get_metadata",
        "get_function_by_name",
        "get_function_by_address",
        "get_current_address",
        "get_current_function",
        "convert_number",
        "list_functions",
        "list_strings",
        "search_strings",
        "decompile_function",
        "disassemble_function",
        "get_xrefs_to",
        "get_entry_points",
        "set_comment",
        "rename_local_variable",
        "rename_global_variable",
        "set_global_variable_type",
        "rename_function",
        "set_function_prototype",
        "declare_c_type",
        "set_local_variable_type"
      ],
      "alwaysAllow": [
        "check_connection",
        "get_metadata",
        "get_function_by_name",
        "get_function_by_address",
        "get_current_address",
        "get_current_function",
        "convert_number",
        "list_functions",
        "list_strings",
        "search_strings",
        "decompile_function",
        "disassemble_function",
        "get_xrefs_to",
        "get_entry_points",
        "set_comment",
        "rename_local_variable",
        "rename_global_variable",
        "set_global_variable_type",
        "rename_function",
        "set_function_prototype",
        "declare_c_type",
        "set_local_variable_type"
      ]
    }
  }
}

"c:\MCP\ida-pro-mcp"这个文件夹需要从github上clone,src/ida_pro_mcp,手动修改文件夹名字为ida-pro-mcp保存并尝试链接
:


回到cline首页:



进行如下勾选:



4.尝试
尝试分析一个反调试函数
:


尝试修改反调试函数:


schips · 发表于 2025-4-18 10:32

谢谢分享，这个用法太高级了，我还没研究过

PoJieDaWang123 · 发表于 2025-4-18 11:08

赞一个，试下效果怎么样

fengjicheng · 发表于 2025-4-18 14:44

卧槽，mcp再发展发展 agent ai 前景更广阔了。

abcdtest123 · 发表于 2025-4-20 14:12

mcp分析函数是仅限于当前函数，还是对于其中调用的函数也能进行分析然后再判断当前函数的功能

allendoyle · 发表于 2025-4-28 23:40

感谢分享

tavid · 发表于 2025-5-3 00:13

连接不上ida啊

纳锋 · 发表于 2025-12-3 00:59

难度不小

帐号		自动登录	找回密码
密码			注册[Register]

[IDA Plugin] IDA MCP配置

免费评分