{
  "added_at": "2026-11-02",
  "additional_evidence_urls": [
    "https://github.com/L4ys/LazyIDA/blob/0ecdf8d62554405fecdd000c750644499f4eccc0/LazyIDA.py",
    "https://github.com/L4ys/LazyIDA/blob/0ecdf8d62554405fecdd000c750644499f4eccc0/ida-plugin.json",
    "https://github.com/L4ys/LazyIDA/blob/0ecdf8d62554405fecdd000c750644499f4eccc0/CHANGELOG.md",
    "https://github.com/L4ys/LazyIDA/blob/0ecdf8d62554405fecdd000c750644499f4eccc0/LICENSE",
    "https://github.com/L4ys/LazyIDA/releases/tag/v1.1.0"
  ],
  "category": "native-analysis",
  "description_en": "Single-file IDA plugin of convenience actions first written for CTF work. In the disassembly and hex views it dumps a selection as a string, hex string, C/C++ array or Python list of bytes, words, dwords or qwords and copies the result to the clipboard, shows a selection XORed with one byte, fills it with NOPs, and copies or jumps to addresses and file offsets by hotkey. With Hex-Rays it toggles a function’s return type to void, copies item names and jumps to the member function behind an obj->func call on double-click, while a heuristic scan lists printf-family calls whose format argument is not a read-only constant.",
  "description_zh": "最初为 CTF 解题编写的单文件 IDA 便捷操作插件。在反汇编和十六进制视图中，它可把选区导出为字符串、十六进制字符串，或按字节、字、双字、四字导出为 C/C++ 数组或 Python 列表，并复制到剪贴板；还能显示选区与单个字节异或后的结果、用 NOP 填充选区，并通过快捷键复制或跳转到地址和文件偏移。配合 Hex-Rays 时，它可把函数返回类型切换为 void、复制条目名称，双击 obj->func 形式的调用时跳转到对应成员函数；另有启发式扫描，列出格式参数并非只读常量的 printf 系列调用。",
  "entry_url": "https://awesomerea.org/resources/lazyida/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/lazyida/",
  "evidence_url": "https://github.com/L4ys/LazyIDA/blob/0ecdf8d62554405fecdd000c750644499f4eccc0/README.md",
  "group": "tools",
  "id": "lazyida",
  "json_url": "https://awesomerea.org/resources/lazyida/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/lazyida/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/lazyida/index.md",
  "name": "LazyIDA",
  "name_zh": "LazyIDA：IDA 便捷操作插件",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "The reviewed master commit is three commits after the v1.1.0 release of 2026-01-25; LazyIDA.py now declares 1.1.1 while ida-plugin.json still says 1.1.0. The plugin is the single LazyIDA.py file, installed with Hex-Rays’ hcli plugin command or copied into the IDA plugins directory. ida-plugin.json asks for IDA 7.4 or later on Windows x86-64, Linux x86-64 and macOS x86-64 or arm64; the changelog adds IDA 9.0 and 9.2 support, and clipboard access uses PySide6 on IDA 9.2+ and PyQt5 on earlier GUI builds.",
    "It works on whatever database the user opens in IDA and bundles no sample binaries. The Hex-Rays actions load only when a Hex-Rays decompiler initialises. The format-string scan is offered in the disassembly view only for 32- and 64-bit x86 and 32-bit ARM databases; it walks back from each call to printf-family functions in .text, .plt, .idata or .plt.got using fixed register and stack-slot conventions, so its hits are leads to check by hand, not confirmed vulnerabilities.",
    "The README says the project was written casually about ten years ago and that several features are now outdated: return-type removal is built into IDA 7.5+, IDA’s Shift-E export can replace the dump actions, and the format-string scan should be reimplemented with the Hex-Rays API; it points users to HappyIDA instead. Multi-byte dumps decode little-endian values, and Fill with NOPs writes x86 0x90 bytes into the database whatever the architecture.",
    "The repository has no tests or CI. MIT per LICENSE and ida-plugin.json; IDA Pro and the Hex-Rays decompiler keep their own licences."
  ],
  "requirements_zh": [
    "所审阅的 master 提交位于 2026-01-25 发布的 v1.1.0 之后三个提交；LazyIDA.py 已标注 1.1.1，ida-plugin.json 仍为 1.1.0。插件只有 LazyIDA.py 一个文件，可用 Hex-Rays 的 hcli 插件命令安装，或复制到 IDA 插件目录。ida-plugin.json 要求 IDA 7.4 或更高版本，平台为 Windows x86-64、Linux x86-64 以及 macOS x86-64 或 arm64；更新日志记载了对 IDA 9.0 和 9.2 的支持，剪贴板功能在 IDA 9.2+ 使用 PySide6，在更早的图形界面版本中使用 PyQt5。",
    "插件作用于使用者在 IDA 中打开的任意数据库，不附带样本二进制。Hex-Rays 相关操作仅在 Hex-Rays 反编译器成功初始化时加载。格式化字符串扫描只在 32 位和 64 位 x86 以及 32 位 ARM 数据库的反汇编视图中提供；它从 .text、.plt、.idata 或 .plt.got 中 printf 系列函数的每个调用处向前回溯，依据固定的寄存器与栈槽约定判断格式参数，因此结果只是需要人工核实的线索，并非已确认的漏洞。",
    "README 称该项目约十年前随手写成，部分功能已经过时：IDA 7.5+ 已内置移除返回类型功能，IDA 的 Shift-E 导出可替代导出操作，格式化字符串扫描应改用 Hex-Rays API 重新实现；README 建议改用 HappyIDA。多字节导出按小端序解码，“Fill with NOPs”无论架构如何都向数据库写入 x86 的 0x90 字节。",
    "仓库没有测试或 CI。LICENSE 与 ida-plugin.json 标明采用 MIT 许可；IDA Pro 与 Hex-Rays 反编译器各有其许可。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/L4ys/LazyIDA",
  "verification": "source-reviewed",
  "verified_at": "2026-10-20"
}