kittymagician / Aegis

Aegis - Flask web interface for scanning files with YARA

Aegis - Flask web interface for scanning files with YARA

This application was designed with end users in mind. Upload any file and Aegis will provide a YARA scan report and delete the uploaded file.

Installation Guide

step 0 - git clone this repo.

step 1 - place the yara rules in /rules

step 2 - compile YARA and install packages for python.

step 3 - Start the web app with python3 aegis.py

step 4 - visit the web app by default the port is set to port 3000 however this can be modified to use port 80 by using gunicorn/nginx.

Screenshots

Upload Page

Results Page

Requirements

Python3 - https://python.org

YARA - https://virustotal.github.io/yara/

yara-python - https://pypi.org/project/yara-python/

Does Aegis test rules before execution?

No. Please test your YARA rules before including them in the Rules folder.

Get more rules

Yara-Rules

Neo23x0 Signature-Base

InQuest Awesome-Yara

Licence

Aegis is licenced under the MIT licence.