IDA Cheat-Sheet.md

• Search

→ → Next Code : Alt + C → Next Data: Ctrl + D → Immediate Value: Alt + I → Text : Alt + T →Next Text : Ctrl + T →Sequence of bytes: Alt + B Next Sequence of bytes: Ctrl + B

• Graphs

→ Flow Chart : F12
→ Function Call : Ctrl + F12

• Comments

      → Comment enter : ⬆️ +;
     → Enter repeatable comment ;
     → Enter posterior lines : ⬆️ + Ins
     → Insert predefined comment ⬆️ + F1
  

  • Subviews

    → Names : ⬆️ + F4
    → Functions : ⬆️ + F3
    → Strings: ⬆️ + F12
    → Segments : ⬆️ + F7
    → Segement Registers : ⬆️ + F8
    → Signatures : ⬆️ + F5
    → Type Libraries : ⬆️ + F11
    → Structures : ⬆️ + F9
    → Enumerators : ⬆️ + F10

- File Operations

    → Parse C header file : Ctrl + F9
    →Create ASM File : Alt + F10
    → Save Database → Ctrl + W

- Tracing

    → Stack trace : Ctrl + Alt + S

- Debugger

   → Terminate Process : Ctrl + F2
   → Step into : F7
   → Step Over : F8
   → Run to cursor Breakpoints : F4
   → Breakpoint list : Ctrl + Alt + B

- Edit

     → Copy : Ctrl + Ins
    → Begin Selcetion : Alt + L
    → Manual instructions: Alt + F2
    → Code → C
    → Data : D
    → Struct Variable : Alt + Q
    → ASCII String : A
    → Array: Num *
    → Undefine : U
    → Rename : N

- Operand Type

    → Offset(Data Segment) : O
    → Offset ( current segment) : Ctrl + O
    → Offset by ( any segment) : Alt + R
    → Offset ( user-defined) : Ctrl + R
    → Offset ( struct) : T
    → Number : ⬆️ + 3
    → Hexadecimal : Q
    → Decimal : H
    → Binary : B
    → Character : R
    → Segement: R
    → Enum member : M
    → Stack Variable: K
    → Change Sign : ⬆️ + -
    → Manual : Alt + F1

- Functions

    → Create function : P
    → Edit function : Alt + P
    → Set function end: E
    → Stack variables: Ctrl + K
    → Change stack pointer : Alt + K
    → RENAME REGISTER : V
    → Set function type : Y

- Structs & Segments

    → Edit Segement: Alt + S
    → Change segement register value : Alt + G
    → Struct Var : Alt + Q
    → Force zero offset field : Ctrl + Z
    → Select Union member : Alt + Y

- IDAPython

→ 

![https://s3-us-west-2.amazonaws.com/secure.notion-static.com/f79240ab-a5cf-4ad5-a4b5-289db607166f/Untitled.png](https://s3-us-west-2.amazonaws.com/secure.notion-static.com/f79240ab-a5cf-4ad5-a4b5-289db607166f/Untitled.png)

Resource credits : [https://github.com/inforion/idapython-cheatsheet](https://github.com/inforion/idapython-cheatsheet) 

Resource Credits : [https://malwareunicorn.org/workshops/idacheatsheet.html](https://malwareunicorn.org/workshops/idacheatsheet.html)