lw-yara is a Yara ruleset based on PHP shells and other webserver malware. It is designed to detect and identify malware, specifically PHP shells and other webserver malware. This ruleset is intended for use with Yara, a tool for identifying and classifying malware. lw-yara is a valuable resource for security professionals and researchers looking to detect and analyze malware. For more information on using lw-yara, please visit the GitHub repository at https://github.com/Hestat/lw-yara.
FEATURES
ALTERNATIVES
Joe Sandbox Community provides automated cloud-based malware analysis across multiple OS platforms.
A tool that generates Yara rules for strings and their XOR encoded versions, as well as base64-encoded variations with different padding possibilities.
Holistic malware analysis platform with interactive sandbox, static analyzer, and emulation capabilities.
Boomerang Decompiler is a machine code decompiler supporting various architectures and file formats, with a focus on high-level language output.
A .Net wrapper library for the native Yara library with interoperability and portability features.
A Linux process injection tool that injects shellcode into a running process
PINNED
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.