Loki

Loki copied to clipboard

To find c2 server malicious IP and domains

1

Hi Team, I would like to understand how the C2 Back Connect Check works. Could you please provide me with the sample POC and arguments? I tried but its not...

Rameshkhanna123

Need : sudo apt-get install libssl-dev to making requiement

Ozer0x777

Implement Include Callback for YARA Rule Includes

2

This pull request introduces a new include_callback function to properly handle the YARA rule includes

spmaris

Added steps explaining how to use python virtual environments to use Loki due to some Linux distros locking the python global installation of modules.

ikoas

I'm seeing Loki warnings on my Nuclei template directory like this: `FILE: C:\Users\\nuclei-templates\http\cves\2018\CVE-2018-17431.yaml SCORE: 60 TYPE: UNKNOWN SIZE: 1552 FIRST_BYTES: b'-' CREATED: Thu May 18 19:34:57 2023 MODIFIED: Thu May...

g33k247

On Loki scan start, multiple unterminated regular expression messages occur

4

Getting a bunch of these messages when starting a scan: line 1126, in initialize_yara_rules yara.SyntaxError: line 22: unterminated regular expression On Windows 11, executing from PowerShell. Once Loki gets past...

g33k247

seems that the scanner picks the edge browser

3

Hi I start using the 0.46.1 seems that the scanner picks the edge browser open pages and kill their process  [](url) How can I run the scan...

eyaladmin

When running Loki on Linux, Filename IOCs that reside in the Windows root folder, such as `C:\\Program.exe` will be matched in every (sub)folder in the scan directory. Example scan results,...

xathon

Security vulnerabilities in Python dependencies

3

[`Safety`](https://pypi.org/project/safety) run in our GitHub Actions finds `8 vulnerabilities were found in 6 packages` in `requirements.txt`.

cclauss

Is it possible to force Memory Dump Scan (mdmp-files) during yara check without rebuilding the app?

ch1sh1rsk1