yarGen
yarGen is a generator for YARA rules
Malware AnalysisOpen Source SecurityOpen Source
About
yarGen is a tool that generates YARA rules from strings found in malware files while filtering out strings that also appear in goodware files. It includes a database of goodware strings and opcodes, which must be extracted before use. The tool supports various features such as AI integration for rule refinement, opcode analysis, and the ability to create multiple databases for better classification of strings and opcodes.
Open Source Health
- Stars
- 1,814
- Forks
- 305
- License
- Not stated
- Last commit
- 9 months ago
Python
Alternatives to yarGen
Restore Symbolby JunA reverse engineering tool to restore stripped symbol table for iOS app.
Magisk Fridaby ViRb3🔐 Run frida-server on boot with Magisk, always up-to-date
VXUG-Papersby vxundergroundResearch code & papers from members of vx-underground.
Linux Malwareby Tim BrownTracking interesting Linux (and UNIX) malware. Send PRs
Android Unpackerby Tim StrazzereAndroid Unpacker presented at Defcon 22: Android Hacker Protection Level 0
Resources & Links
Related Categories
Using yarGen?
Track its cost next to the rest of your stack and get a reminder before it renews.
Add to my stackVendor
Florian Roth
#DFIR #Sigma #YARA #Rust #Python #Go