search

kevthehermit / PasteHunter

Scanning pastebin with yara rules
GNU General Public License v3.0
1.06k stars 228 forks source link

(feat) Scan hastebin #130

Open devopscast opened 3 years ago

devopscast commented 3 years ago

Just as one scans ixio, hastebin is another pastebin clone.

Plazmaz commented 3 years ago

So I took a quick look at this, and it'll be more difficult than ix. ix uses incremental values. Hastebin uses psuedorandom numbers. It should be possible to predict/reverse their prng, but it's definitely more involved and would require generating at least a few Hastebin URLs to recover the state.