Tigzy

Results 22 comments of Tigzy

I don't know much about Yeti internals, but if there's a place to put API keys the file storage can be hooked to upload files too MRF? then, display a...

See MRF as an extended samples storage. So I think the best way to take advantage of it would be to store the samples into MRF (as it's the main...

OK, so I found the submit_http_post, filled the config and created the symlink. However it doesn't get called when I receive binaries (unlike hpfeeds that I filled the same way),...

@DZKeeper yes, here: http://www.adlice.com/catch-malware-with-your-own-honeypot-v2/

@phibos complete.unique doesn't seem to be called in submit_http_post. probably a bug.

Replacing with this code seems to fix it. ``` try: ep_rva = pe.entrypoint - pe.optional_header.imagebase ep_bytes = pe.get_content_from_virtual_address(ep_rva, 64) except Exception as e: log.warning("can't get entrypoint bytes from %s: %s",...

I tired with this, but still doesn't work: `./configure CFLAGS="-ggdb3 -O0 -I/custom/openssl_1.1.1_pre7/include" LDFLAGS="-ggdb3 -L/custom/openssl_1.1.1_pre7/unix" --enable-static `

``` checking openssl/md5.h usability... yes checking openssl/md5.h presence... no configure: WARNING: openssl/md5.h: accepted by the compiler, rejected by the preprocessor! configure: WARNING: openssl/md5.h: proceeding with the compiler's result checking for...

Nevermind I found the issue. You need to have both static and shared libs for Openssl otherwise it doesn't work, have no idea why... Can we force static only for...

@dexter0810 Yes I fixed it, I don't remember all the details but seems like the command above did it. You need to give include/libs paths to yara configure command: ./configure...