dotRhys / yara_rules

yara rules for crypto detection

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Yara Crypto Rules

After seeing @chort0's rule for RC61 on Twitter, I decided to write a few rules for other things.

One-Way Hash Functions

  • MD5
  • SHA1 (Currently also triggers on RIPEMD160)
  • SHA224/256
  • SHA384/512
  • RIPEMD-160 (Currently also triggers on SHA1)
  • WHIRLPOOL

Block Ciphers

  • Blowfish
  • RC6 - By @chort02

Pseudo-Random Number Generators

About

yara rules for crypto detection

License:BSD 3-Clause "New" or "Revised" License