Top 7 YARA Yara Projects

signature-base

12 2,329 9.2 YARA

YARA signature and IOC database for my scanners and tools

Project mention: Xzbot: Notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094) | news.ycombinator.com | 2024-04-01

> It doesn't matter.
To understand the exact behavior and extend of the backdoor, this does matter. An end to end proof of how it works is exactly what was needed.
> A way to check if servers are vulnerable is probably by querying the package manager
Yes, this has been know since the initial report + later discovering what exact strings are present for the payload.
https://github.com/Neo23x0/signature-base/blob/master/yara/b...
> Not very sophisticated, but it'll work.
Unfortunately, we live in a world with closed-servers and appliances - being able as a customer or pen tester rule out certain class of security issues without having the source/insights available is usually desirable.

APKiD

1 1,895 7.4 YARA

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
malware-ioc

6 1,503 6.9 YARA

Indicators of Compromises (IOC) of our various investigations
Ukraine-Cyber-Operations

10 908 3.4 YARA

Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to Ukraine.
reversinglabs-yara-rules

3 688 5.6 YARA

ReversingLabs YARA Rules
Cerebro

1 19 1.9 YARA

Scripts and lists to help generate YARA friendly string mutations (by stvemillertime)
CVE-2022-26134-Exploit-Detection

1 1 1.8 YARA

This repository contains Yara rule and the method that a security investigator may want to use for CVE-2022-26134 threat hunting on their Linux confluence servers.
WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).