The base64_substring tool helps malware analysts search through base64-encoded samples by enumerating all possible base64 encodings for a given search term and generating a yara rule that checks those possibilities. To run an example, generate a yara rule that matches a base64-encoded file containing the term 'Application' by using the provided script. Further reading: 'Searching for Content in Base-64 Strings' by Lee Holmes.
FEATURES
SIMILAR TOOLS
Blazingly fast Yara queries for malware analysts with an analyst-friendly web GUI.
Joe Sandbox Community provides automated cloud-based malware analysis across multiple OS platforms.
Falcon Sandbox is a malware analysis framework that provides in-depth static and dynamic analysis of files, offering hybrid analysis, behavior indicators, and integrations with various security tools.
Intezer is a cloud-based malware analysis platform that detects and classifies malware using genetic code analysis.
A collaborative malware analysis framework with various features for automated analysis tasks.
A tool designed to handle archive file data and augment Yara's capabilities.
A binary analysis and management framework for organizing and analyzing malware and exploit samples, and creating plugins.
PINNED

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.