a-ray-grass Logo

a-ray-grass

0
Free
Visit Website

a-ray-grass is a YARA module that provides support for DCSO format bloom filters in YARA. In the context of hashlookup, it allows quickly discard known files 'pour séparer le grain de l'ivraie'. Installation: - Copy the folder libyara/fleur in libyara - Copy the folder libyara/modules/araygrass in libyara/modules - Modify libyara/Makefile.am - Add modules/araygrass/araygrass.c to the MODULES variable - Add fleur/fnv.c and fleur/fleur.c to the libyara_la_SOURCES variable - Modify /libyara/modules/module_list - Append MODULE(araygrass) at the end of the file - Finally modify libyara/modules/araygrass/araygrass.c There you will find two paths defined: - BF_PATH_IN: specify here the path to your input bloom filter, the filter against which variables will be checked - BF_PATH_OUT: specify here the path where you wish to save the modified bloom filter after YARA finished its execution. It can be left empty if no modifications are made to the filter. It's totally ok to set the same path for both variables. Compilation: - Go back to YARA's root folder and make

FEATURES

ALTERNATIVES

A simple XSS scanner tool for identifying Cross-Site Scripting vulnerabilities

A file analysis framework that automates the evaluation of files by running a suite of tools and aggregating the output.

A command line utility for searching and downloading exploits

PinCTF is a tool for using Intel's Pin Tool to instrument reverse engineering binaries and count instructions.

OCaml wrapper for YARA matching engine for malware identification

A tool to detect, manage and exploit Blind Cross-site scripting (XSS) vulnerabilities.

Assembler/disassembler for the dex format used by Dalvik, Android's Java VM implementation.

Yabin creates Yara signatures from malware to find similar samples.