Skip to content

yuchincheng/yararepo

Repository files navigation

yara-collections

掃描一般主機,請用: ALLYARA.tar.gz

掃描web server,請用: ALLYARA.tar.ga + WEB_BURP

掃描Mobile,請用MOBILE_MALWARE

https://github.com/mikesxrs/Open-Source-YARA-rules (長期收集各家yara rules的站台)
https://github.com/Neo23x0/signature-base/tree/master/yara (資安大神收集與分享得YARA rules,建議可以常上來收集,Included)
https://github.com/Yara-Rules/rules (正統yara rule project收集的站台, Updated Included)
https://github.com/SupportIntelligence/Icewater (持續Update,收集yara好站)
https://github.com/AlienVault-Labs/AlienVaultLabs/tree/master/malware_analysis (No update)
https://github.com/bwall/bamfdetect/tree/master/BAMF_Detect/modules/yara (No update)
https://github.com/airbnb/binaryalert/tree/master/rules. (Include)
https://github.com/codewatchorg?tab=repositories. (No update)
https://github.com/ctxis/CAPE/tree/master/data/yara/CAPE ( Include) (CAPE: Malware Configuration And Payload Extraction需要研究一下)
https://github.com/Xumeiquer/yara-forensics/tree/master/file (Include)
https://github.com/prolsen/yara-rules (no Update)
https://github.com/malice-plugins/yara/tree/master/rules (updated, not included)
https://github.com/Hestat/lw-yara (updated, for web servers and webshells)
https://koodous.com/rulesets (yard rules 資料庫,申請帳號可下載,沒有include)
https://github.com/kevthehermit/YaraRules (No update)
https://github.com/InQuest/yara-rules (分享的yara rules,時常更新,參考價值高)
https://github.com/codewatchorg/Burp-Yara-Rules (burp yard rules for web server)
https://github.com/mikesxrs/Open-Source-YARA-rules (收集的yara rules,很多可以下載交互比對是否已經存在)
https://github.com/karttoon/binsequencer (給一堆Sample,自動產生YARA Rules,可以研究一下)
https://github.com/rastrea2r/rastrea2r (結合YARA Rules / sysinternals掃描的Project,符合DERL的想法)
https://github.com/citizenlab/malware-signatures (很久沒更新了)
https://github.com/EmersonElectricCo/fsf/tree/master/fsf-server/yara (很久沒更新)
https://github.com/godaddy/yara-rules (很久沒更新)
https://github.com/h3x2b/yara-rules/tree/master/malware (有更新但是不多)

Old Reference:
https://github.com/InQuest/awesome-yara
https://github.com/InQuest/yara-rules
https://github.com/Yara-Rules/rules https://github.com/Neo23x0/signature-base/tree/master/yara https://github.com/codewatchorg/Burp-Yara-Rules https://github.com/tjnel/yara_repo https://github.com/mikesxrs/Open-Source-YARA-rules

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages