Vsevolod Stakhov
|
d43bc62e0a
|
[Minor] Core: Treat 0x200c as zero width space as well
|
5 years ago |
Vsevolod Stakhov
|
dce02c48d8
|
[Project] Move action definition to avoid uthash pollution
|
5 years ago |
Vsevolod Stakhov
|
96986ba7f7
|
[Project] More steps to flexible actions
|
5 years ago |
André Peters
|
96603c2db4
|
Add subject to get_general_metadata
|
5 years ago |
Carsten Rosenberg
|
2134040728
|
[FIX] lua_scanners - duplicated fail symbol + luastyle
|
5 years ago |
Carsten Rosenberg
|
d68a5f42a3
|
[Fix] lua_scanners - fix luacheck
|
5 years ago |
Carsten Rosenberg
|
92ec1c9701
|
[Minor] external_services config + groups
|
5 years ago |
Vsevolod Stakhov
|
60107a1f7d
|
[Project] Add concept of flexible actions
|
5 years ago |
Carsten Rosenberg
|
33445bb715
|
[Minor] lua_scanners - olefy - small changes
|
5 years ago |
Carsten Rosenberg
|
458cae1335
|
[Minor] lua_scanners - dcc - add redis caching and retries
|
5 years ago |
Carsten Rosenberg
|
83f771a19c
|
[Minor] lua_scanners - move and extend mime_part matching
|
5 years ago |
Carsten Rosenberg
|
20f34540fc
|
[Fix] lua_scanner - oletools typos, logging
|
5 years ago |
Carsten Rosenberg
|
c0f5acd353
|
[Fix] lua_scanners - savapi redis prefix
|
5 years ago |
Carsten Rosenberg
|
45b24132aa
|
[Minor] lua_scanner - use override_defaults
|
5 years ago |
Carsten Rosenberg
|
b2bd2eefe7
|
[Minor] lua_scanner - redis prefix (support for multiple rules of the same type)
|
5 years ago |
Carsten Rosenberg
|
7848a14b94
|
[Feature] external_services - oletools (olefy) support
|
5 years ago |
Carsten Rosenberg
|
f5a8c5a87f
|
[Minor] lua_scanners - add support for dynamic weights
|
5 years ago |
Carsten Rosenberg
|
3214f48255
|
[Minor] external_services - add support for mime_type matching
|
5 years ago |
Carsten Rosenberg
|
2703711c00
|
[Minor] lua_scanners - module_name, typos, logging
|
5 years ago |
Vsevolod Stakhov
|
776a0273b5
|
[Minor] Core: Also count spaces when skipping invisible spaces
|
5 years ago |
Vsevolod Stakhov
|
f03ded0565
|
[Feature] Core: Ignore and mark invisible spaces
|
5 years ago |
Vsevolod Stakhov
|
12e3b59261
|
[Minor] Hfilter: Add more strict rules for some of the regexps
Issue: #2140
|
5 years ago |
Vsevolod Stakhov
|
15bb413994
|
[Rules] Improve LEAKED_PASSWORD_SCAM detection
|
5 years ago |
Vsevolod Stakhov
|
e5cc4ac8c6
|
[Fix] Arc: Use a separated list of headers for arc signing
Issue: #2704
Closes: #2704
|
5 years ago |
Vsevolod Stakhov
|
3d4d0144a5
|
[Fix] Archive: Final fixes for 7z archives
Issue: #2629
Closes: #2629
|
5 years ago |
Vsevolod Stakhov
|
b5917e6cb1
|
[Minor] Archives: More fixes to 7zip parsing
|
5 years ago |
Vsevolod Stakhov
|
6519ba4ce2
|
[Minor] Archive: Find encrypted 7zip codecs
|
5 years ago |
Vsevolod Stakhov
|
1f6b4fd130
|
[Minor] Archives: Fix 7zip codecs id reading logic
|
5 years ago |
Vsevolod Stakhov
|
f8d6761a36
|
[Minor] Core: Add support for hex encoded characters in printf
|
5 years ago |
Vsevolod Stakhov
|
1c11c280f0
|
[Minor] Core: Do not include full urls in output unless asked
|
5 years ago |
Vsevolod Stakhov
|
da7b65e4b5
|
[Minor] Relax CTYPE_MISSING_DISPOSITION rule for pgp encryption
Issue: #2706
Closes: #2706
|
5 years ago |
Vsevolod Stakhov
|
3e9c05bcc9
|
[Minor] Lua_util: Remove broken and unused function
|
5 years ago |
Vsevolod Stakhov
|
7b6227cfaa
|
[Minor] Core: Allow to pass flags to squeezed rules
|
5 years ago |
Vsevolod Stakhov
|
6e436ccc95
|
[Minor] Lua_task: Allow to check mime flag for the task
|
5 years ago |
Vsevolod Stakhov
|
2c5bbd9662
|
[Minor] Add more mime flags
|
5 years ago |
Vsevolod Stakhov
|
c143670bca
|
[Minor] Regexp: Allow to add mime only regexp rules
|
5 years ago |
Vsevolod Stakhov
|
d9f3f32336
|
[Minor] Add some mime only rules
|
5 years ago |
Vsevolod Stakhov
|
f358aec84f
|
[Minor] Core: Add concept of mime only rules
|
5 years ago |
Vsevolod Stakhov
|
02d4e6e93a
|
[Fix] Core: Detect encrypted rarv5 archives
Issue: #2629
|
5 years ago |
Vsevolod Stakhov
|
b6dbe34858
|
[Minor] Core: Improve raw files scan
|
5 years ago |
Vsevolod Stakhov
|
da6710da28
|
[Minor] Mime_types: Allow empty filename
|
5 years ago |
Vsevolod Stakhov
|
019fb16fe8
|
[Feature] Core: Allow to construct scan tasks from raw data
|
5 years ago |
Vsevolod Stakhov
|
d159074e35
|
[Remove] Remove pyzor support as requested
|
5 years ago |
Vsevolod Stakhov
|
55707db649
|
[Minor] Small style improvements in external services
|
5 years ago |
Vsevolod Stakhov
|
9b806e7bc5
|
[Feature] Add pyzor support (by crosenberg)
|
5 years ago |
Vsevolod Stakhov
|
f3b23ce015
|
[Feature] Plugins: Add preliminary version of the external services plugin
|
5 years ago |
Vsevolod Stakhov
|
5c2c665915
|
[Minor] Lua_scanners: Add debug aliases
|
5 years ago |
Vsevolod Stakhov
|
a72937fcfb
|
[Minor] Lua_util: Implement debug aliases
|
5 years ago |
Vsevolod Stakhov
|
e9c96fdb28
|
[Minor] Lua_scanners: Add more generic yield result
|
5 years ago |
Vsevolod Stakhov
|
28c372c37e
|
[Minor] Lua_scanners: Change categories for dcc
|
5 years ago |