tbarabosch/apihash_to_yara tbarabosch/apihash_to_yara

  • Stars
    star
    17
  • Rank 1,254,344 (Top 25 %)
  • Language YARA
  • License
    Apache License 2.0
  • Created over 3 years ago
  • Updated over 3 years ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
tbarabosch/apihash_to_yara
github

tbarabosch

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Generates YARA rules to detect malware using API hashing

More Repositories

1

quincy

Implementation of the DIMVA 2017 publication "Quincy: Detecting Host-Based Code Injection Attacks in Memory Dumps"
Python
69
star
2

macos-re

Scripts and tools for macOS reversing
Python
14
star
3

1001-injects

Tiny research project to understand code injections on Linux based systems
C
13
star
4

awesome-macos-re

Contains a list of handy tools for reversing on macOS
6
star
5

quincy-complementary-material

Complementary material of the DIMVA 2017 publication "Quincy: Detecting Host-Based Code Injection Attacks in Memory Dumps"
6
star
6

w32ShellcodeLoader

Simple tool to load x86 shellcode on Windows
C++
4
star
7

pocs

PoCs of security issues that I've reported
C
3
star