yara-python
disas-bench
| yara-python | disas-bench | |
|---|---|---|
| 1 | 2 | |
| 623 | 52 | |
| 0.6% | - | |
| 6.7 | 0.0 | |
| about 1 month ago | 3 months ago | |
| C | C | |
| Apache License 2.0 | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
yara-python
-
Pros and Cons of Rust for Cybersecurity
But, due to the young ecosystem, Rust isn't often the best choice for the 2nd category. There are exceptions: while working on a ROP exploitation CLI tool, I was surprised to find the top 3 fastest x86-64 disassemblers are all written in Rust. But other languages just have more mature security ecosystems. Python in particular has some amazing libraries like scapy and bindings for yara.
disas-bench
-
Pros and Cons of Rust for Cybersecurity
But, due to the young ecosystem, Rust isn't often the best choice for the 2nd category. There are exceptions: while working on a ROP exploitation CLI tool, I was surprised to find the top 3 fastest x86-64 disassemblers are all written in Rust. But other languages just have more mature security ecosystems. Python in particular has some amazing libraries like scapy and bindings for yara.
-
Just released v0.2.0 of bddisasm - a no_std x86/x86_64 instruction decoder which aims to provide as much information as possible about an instruction
I hate to be that guy, but I want to mention the disas-bench project, a open-source benchmark for various disassembler libraries, including bddisasm.
What are some alternatives?
signature-base - YARA signature and IOC database for my scanners and tools
bddisasm - bddisasm is a fast, lightweight, x86/x64 instruction decoder. The project also features a fast, basic, x86/x64 instruction emulator, designed specifically to detect shellcode-like behavior.
awesome-yara - A curated list of awesome YARA rules, tools, and people.
mishegos - A differential fuzzer for x86 decoders
a-ray-grass - a-ray-grass is a yara module that provides support for DCSO-format bloom filters in yara. In the context of hashlookup, it allows quickly discard known files "pour séparer le grain de l'ivraie"
xgadget - Fast, parallel, cross-variant ROP/JOP gadget search for x86/x64 binaries.
scapy - Scapy: the Python-based interactive packet manipulation program & library.
yara - The pattern matching swiss knife
fleur - Fleur implements a Bloom Filter library in C that is fully compatible with DCSO's Go and python implementations.
Loki - Loki - Simple IOC and YARA Scanner