idapro_docker

a docker image for ida pro 9.x+ that exposes a rpyc service with the new ida-domain api! this gives you access to a self-contained, scriptable ida pro instance. binaries are not included, only the scripts to set up and build everything; drop in your copy of ida and your license and build an image!

usage

docker image

prepare the variables:

• IDA_DIR: path to unpacked ida pro 9.x+ for linux
• IDA_LICENSE: path to .hexlic license file

build the image:

docker build --platform linux/amd64 --build-arg IDA_DIR=ida-pro-9.1 --build-arg IDA_LICENSE=idapro.hexlic -t idapro:dev .

run the container:

docker run --rm -it -p 18812:18812 idapro:dev

connect from python:

import rpyc
c = rpyc.connect("127.0.0.1", 18812)

def remote_temp_copy():
    tempfile = c.root.import_module("tempfile")
    shutil = c.root.import_module("shutil")
    temp_dir = tempfile.mkdtemp()
    temp_binary = f"{temp_dir}/ls"
    shutil.copy("/bin/ls", temp_binary)
    return temp_binary

ida = c.root.ida
print(f"ida domain v{ida.__version__}")

# open a sample database
temp_binary = remote_temp_copy()
with ida.Database.open(path=temp_binary, save_on_close=False) as db:
    print(f"✓ Opened: {temp_binary}")
    print(f"  Architecture: {db.architecture}")
    print(f"  Entry point: {hex(db.entries[0].address)}")
    print(f"  Address range: {hex(db.minimum_ea)}-{hex(db.maximum_ea)}")
    func_count = len(list(db.functions))
    print(f"  Functions: {func_count}")
    string_count = len(list(db.strings))
    print(f"  Strings: {string_count}")
print("✓ Database closed")

native

you can also use the server script natively on your own machine.

./ida_domain_server.py --ida-dir /path/to/ida