Skip to content

Phoul/yara_rules

Repository files navigation

Yara Crypto Rules

After seeing @chort0's rule for RC61 on Twitter, I decided to write a few rules for other things.

One-Way Hash Functions

  • MD5
  • SHA1 (Currently also triggers on RIPEMD160)
  • SHA224/256
  • SHA384/512
  • RIPEMD-160 (Currently also triggers on SHA1)
  • WHIRLPOOL

Block Ciphers

  • Blowfish
  • RC6 - By @chort02

Pseudo-Random Number Generators

About

yara rules for crypto detection

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published