radare2-extras icon indicating copy to clipboard operation
radare2-extras copied to clipboard

Creating Yara rule on the fly from the radare2 session

Open radare opened this issue 10 years ago • 1 comments

E.g. select block of hex and run some command to make Yara rule, based on that pattern.

(moved from https://github.com/radare/radare2/issues/844)

radare avatar Feb 23 '15 11:02 radare

Not quite exact (uses current function instead of selected block of hex) but I just implemented this in r2kit.

Simple Gist is here.

cmatthewbrooks avatar Feb 08 '18 13:02 cmatthewbrooks