by Chris Eagle
August 2008, 640 pp.
No source code? No problem. With IDA Pro, you live in a source code–optional world. IDA can automatically analyze the millions of opcodes that make up an executable and present you with a disassembly. But at that point, your work is just beginning. With The IDA Pro Book, you’ll learn how to turn that mountain of mnemonics into something you can actually use.
Hailed by the creator of IDA Pro as the "long-awaited" and "information-packed" guide to IDA, The IDA Pro Book covers everything from the very first steps to advanced automation techniques. While other disassemblers slow your analysis with inflexibility, IDA invites you to customize its output for improved readability and usefulness. You’ll save time and effort as you learn to:
You’ll still need serious assembly skills to tackle the toughest executables, but IDA makes things a lot easier. Whether you’re analyzing the software on a black box or conducting hard-core vulnerability research, a mastery of IDA Pro is crucial to your success. Take your skills to the next level with The IDA Pro Book.
About the Author
Chris Eagle is a senior lecturer at the US Naval Postgraduate School in Monterey, California. He is a co-author of Gray Hat Hacking and has spoken at numerous security conferences, including Black Hat, DEFCON, ToorCon, and ShmooCon.
Table of Contents
Foreword by Pierre Vandevenne
PART I: Introduction to IDA
PART II: Basic IDA Usage
PART III: Advanced IDA Usage
PART IV: Extending IDA's Capabilities
PART V: Real-World Application
PART VI: The IDA Debugger
A: Using IDA Freeware 4.9
View the detailed Table of Contents (PDF)
View the Index (PDF)(top)
"If you are looking for the most thorough and accurate IDA Pro book, you are holding it in your hands. The long awaited book from Chris Eagle is packed with tons of information. Beginners will find it helpful because it covers the basics [and] experienced users will discover new and powerful aspects of IDA Pro. Among other things, you will learn how to deal with obfuscated code, analyze new file formats and processors, [and] write plugins and scripts. I wholeheartedly recommend it to all IDA Pro users."
"This is the densest, most accurate, and, by far, the best IDA Pro book ever released."
"Chris Eagle delivers a very concise, well laid out book in The IDA Pro Book. The step by step examples, and much needed detail of all aspects of IDA alone make this book a good choice...I honestly think, like IDA, it will be the industry standard on one of the more intimidating applications in the security and reverse engineering world."
"Chris Eagle is clearly an excellent educator, as he makes the sometimes very dense and technically involved material easy to read and understand and also chooses his examples well."
"I highly recommend this book to anyone from the person looking to begin using IDA Pro to the seasoned veteran. There truly is something there for everyone."
"Apart from being a great source of information and ideas on how to leverage IDA's power, the writing is also particularly solid, with few or no errors, which is a notable exception to many technical books published nowadays."
"Unlike the two other books I've read on IDA Pro this book has no fluff or filler, its solid information! The funny thing when comparing it to the other...IDA books is it's thicker than both combined, and contains an exponentially larger amount of information."
"Reverse engineering is not for everyone, but it can be a very valuable skillset to develop. It could be a good fit for you or someone on your team if your company deals with targeted malware that’s meant to steal financial, health, or authentication data. Or if you’re interested in vulnerability research and want a job -- there are definitely lucrative positions in that niche of the security industry. Either way, you should take a look at The IDA Pro Book."
"This book does definitely get a strong buy recommendation from me. It's well written and it covers IDA Pro more comprehensively than any other written document I am aware of (including the actual IDA Pro Manual). Furthermore I'm confident that everybody, even people who used IDA Pro for a decade, will learn something from the book and can use it as a reference in daily work."
"Whether you need to solve a tough runtime defect or examine your application security from the inside out, IDA Pro is a great tool and this book is THE guide for coming up to speed."
"Chris Eagle's The IDA Pro Book provides a significantly better understanding not of just IDA Pro itself, but of the entire RE process. There are little gems littered throughout the book that bring in real-life experience and knowledge that you don't always get from other books instructing you in the use of an application."
"Should you buy this book? If you already have (some) RE knowledge and plan on using IDA (even if only the free version), the answer is a resounding yes."