radareorg / r2yara

yara and radare2, better together
GNU Lesser General Public License v3.0
10 stars 1 forks source link

Add r2yara cli tool #2

Open trufae opened 9 months ago

trufae commented 9 months ago

The idea is to have a cli tool to download and manager your yara rule database in your home, all those rules are loaded by the yara plugin. We may have a yara rules-source database somewhere, and let the user download and update new ones for the purpose they need. This tool can be written in Python or the language of choice, as it may be probably running json+rest requests on endpoints to search and download those, and in some cases this requires api keys like for virustotal.

Some rule databases around:

radare commented 1 month ago

This tool can be written in r2js, python or C, ideally it should just spawn r2 and do whatever its needed to generate the yara rules from the options given.

I would probably wait a little for more feedback and discussions to get this done.