gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2026-07-28 14:47:08 -07:00
Code Issues Packages Projects Releases Wiki Activity
6,260 Commits 53 Branches 49 Tags
master
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Moritz Raabe 8de69c639a s/fireeye/mandiant 2021-09-29 12:55:16 +02:00
Moritz Raabe 41786f4ab8 add hidden import and test 2021-09-28 15:39:23 +02:00
Moritz Raabe 8bb1a1cb5a use viv-utils functions 2021-09-23 19:35:14 +02:00
Moritz Raabe cc3b56ddcb disable flirt matching on elf files 2021-09-14 13:59:38 +02:00
Moritz Raabe 0c42942a88 black code style 2021-09-14 09:57:33 +02:00
Moritz Raabe 4c6be15edc minor fixes 2021-09-13 21:15:31 +02:00
Moritz Raabe 80bb0b4aff init variable :/ 2021-09-10 21:29:59 +02:00
Moritz Raabe 06d238a9f9 add ElfFeatureExtractor 2021-09-10 20:38:27 +02:00
Moritz Raabe 16c12f816b update to ubuntu-18.04 2021-09-09 16:45:11 +02:00
Moritz Raabe e88bb4814e update readme 2021-06-30 10:10:44 +02:00
Moritz Raabe f191c4f145 wrap sig loading 2021-06-30 10:04:11 +02:00
Moritz Raabe 6fc2037f45 update sig file names 2021-06-30 08:54:37 +02:00
Moritz Raabe 6860b9a040 address Willi's feedback 2021-06-29 21:16:31 +02:00
Moritz Raabe 5c8a4aafd7 test scripts and fix show-features 2021-06-29 21:16:31 +02:00
Moritz Raabe 02658d6962 do not process non-pe even with --format pe 2021-06-29 21:16:31 +02:00
Moritz Raabe 04b5949a05 address Mike's feedback 2021-06-29 08:57:43 +02:00
Moritz Raabe 18c87e4e55 ida extract library funcs identified via flirt 2021-06-29 08:49:48 +02:00
Moritz Raabe f96d3fd8ba do not process non-pe even with --format pe 2021-06-28 18:21:01 +02:00
Moritz Raabe 4ca9e168fe Merge branch 'master' into fix-630 2021-06-28 11:32:27 +02:00
Moritz Raabe 44b47eb39c update release checklist 2021-06-23 07:44:08 +02:00
Moritz Raabe 45c4b4019a move breaking changes to top 2021-06-23 07:44:05 +02:00
Moritz Raabe 831dc577f4 add breaking change section and reorg 2021-06-23 07:40:33 +02:00
Moritz Raabe 8b58723f40 bump smda and remove xfail 2021-06-07 13:56:55 +02:00
Moritz Raabe bed2e3777e job level exclusion 2021-06-07 12:38:03 +02:00
Moritz Raabe c3ba6a9025 update readme 2021-06-07 10:26:41 +02:00
Moritz Raabe ff66346d2a ignore dependabot for changelog check 2021-06-07 09:52:46 +02:00
Moritz Raabe 63cd70029f dedup code 2021-06-02 11:06:49 +02:00
Moritz Raabe 94089ff43f parse att&ck for output doc 2021-06-02 10:37:19 +02:00
Moritz Raabe e6f45b63d6 fix test xfail 2021-05-31 10:02:31 +02:00
Moritz Raabe de96bb763b address code review 2021-05-28 16:52:17 +02:00
Moritz Raabe 9e62bd1b24 update renderers 2021-05-28 16:40:15 +02:00
Moritz Raabe 54d21a043e parse mbc for result doc 2021-05-28 16:40:15 +02:00
Moritz Raabe f593592ff0 parse mbc fields 2021-05-28 16:40:15 +02:00
Moritz Raabe 204d8b36df add or/optional lint and colors 
closes #348
 2021-05-25 16:32:47 +02:00
Moritz Raabe 8e4e9fc616 Revert "Sync capa-testfiles submodule" 
This reverts commit 826d472c07.
 2021-05-25 14:58:01 +02:00
Moritz Raabe af5613250f lazy import flirt 
closes #540
 2021-05-21 11:31:37 +02:00
Moritz Raabe a8e353fe31 revert rule loading pbar 2021-05-20 14:00:01 +02:00
Moritz Raabe 8a386b6909 improve progress bar output 2021-05-20 13:56:29 +02:00
Moritz Raabe 586726fb13 lint statements for single child statements 2021-05-19 18:25:14 +02:00
Moritz Raabe fc126451a7 add signature files 2021-04-27 19:27:02 +02:00
Moritz Raabe d1cd4ef259 move auto format check 2021-04-09 11:59:30 +02:00
Moritz Raabe 998f4a6bad auto detect shellcode file extensions 2021-04-08 18:49:22 +02:00
Moritz RaabeandAna Maria Martinez Gomez efe50d3313 ci: test on Windows and macOS 
Run the tests on Windows and macOS to avoid failures OS related.

closes #460
 2021-04-06 21:38:07 +02:00
Moritz Raabe 25944864f7 fix submodule typos 2021-04-05 12:52:08 +02:00
Moritz Raabe c0c9ea3403 incorprate Ana's feedback 2021-03-24 09:22:40 +01:00
Moritz Raabe 5aff21a9a1 add PR template 2021-03-23 10:52:01 +01:00
Moritz Raabe 44f517c20d rule loading: ignore files starting with .git 2021-03-22 18:11:29 +01:00
Moritz Raabe 13306b71e0 add file 2021-03-19 09:40:44 +01:00
Moritz Raabe 8719a23de4 dos2unix 2021-03-19 09:40:44 +01:00
Moritz Raabe 7e0b5236af better deal with CRLF/LF issues 2021-03-19 09:40:43 +01:00
Moritz Raabe c7798b3254 ensure LF end of line 2021-03-19 09:40:43 +01:00
Moritz Raabe 1bfe0e0874 ensure LF end of line 2021-03-18 20:15:23 +01:00
Moritz Raabe 55b7ae10a7 remove apirefs from calls from 
closes #416
 2021-02-08 11:56:01 +01:00
Moritz Raabe 84b3f38810 add imagebase to IDA meta data 2021-02-02 13:54:46 +01:00
Moritz Raabe 9b5aaa40de improve bytes feature extraction 2021-02-01 17:17:22 +01:00
Moritz Raabe 0eb8d3e47c fix time debug output 2021-01-28 11:09:25 +01:00
Moritz Raabe 072e30498b adjust negative hex numbers in to_yaml 2021-01-28 10:54:17 +01:00
Moritz Raabe d6e73577af dont change quotes when dumping 2021-01-28 10:54:17 +01:00
Moritz Raabe a81f98be8e manual adjust negative numbers 2021-01-28 10:54:17 +01:00
Moritz Raabe 0980e35c29 simplify string comparison 2021-01-28 10:54:17 +01:00
Moritz Raabe 336c2a3aff add option to only check reformat status 2021-01-28 10:54:17 +01:00
Moritz Raabe e3055bc740 check rule format consistency 2021-01-28 10:54:17 +01:00
Moritz Raabe f18a8f5b31 adjust expected lib path and log time 2021-01-28 10:18:03 +01:00
Moritz Raabe 0d439c0f55 disable extractor progress 2021-01-28 09:22:15 +01:00
Moritz Raabe 4bc06aa8cd closes #405 2021-01-28 08:23:15 +01:00
Moritz Raabe 7b64425c24 update doc and test case 2021-01-28 08:18:23 +01:00
Moritz Raabe c750447d62 potential fix for #398 2021-01-27 17:59:56 +01:00
Moritz Raabe 2c5508febd bump smda, enable Python 3.9 2021-01-22 10:00:25 +01:00
Moritz Raabe f89084677d add base address to freeze 2021-01-08 14:48:26 +01:00
Moritz Raabe b1c1cb4b9b lint with --tag 2021-01-05 16:16:35 +01:00
Moritz Raabe 28ee091107 set level of more viv loggers explicitly 2020-12-08 16:30:23 +01:00
Moritz Raabe 08c3372635 add more xor instructions 2020-12-08 09:21:50 +01:00
Moritz Raabe 4ef860eb07 fix: add viv extract strings for i386ImmMemOper operands 2020-12-03 20:24:29 +01:00
Moritz Raabe 65a365bca1 update halo requirements py2/3 2020-12-01 11:46:53 +01:00
Moritz Raabe fecd0e11eb add dependabot config 2020-12-01 11:46:14 +01:00
Moritz Raabe 0d351794db pin smda 
addresses #369
 2020-12-01 11:02:36 +01:00
Moritz Raabe dfc805b89b improvements for PR #355 2020-11-09 13:39:19 +01:00
Moritz Raabe 75defc13a0 disable fail-fast for tests job 2020-11-09 13:22:23 +01:00
Moritz Raabe 0fd9753681 document PyInstaller build process 
closes #357
 2020-11-03 15:03:32 +01:00
Moritz Raabe b0bf4f8f8e prepare new release 2020-10-23 22:24:50 +02:00
Moritz Raabe 679316946e addressing Willi's feedback 2020-10-22 20:10:47 +02:00
Moritz Raabe fbe104d254 get decoded sample path 
closes #328
 2020-10-22 19:56:41 +02:00
Moritz Raabe 69a4b99d70 extract apis called via jmp 
closes #337
 2020-10-21 12:39:45 +02:00
Moritz Raabe 1e3b29de2e add IDA specific test 2020-10-21 12:16:50 +02:00
Moritz Raabe 12d5fe0afe addressing feedback 2020-10-21 11:25:08 +02:00
Moritz Raabe 9fc6e0d6a2 Merge branch 'enhance/show-features' into viv/extractor/api-thunk-chains 2020-10-20 15:26:51 +02:00
Moritz Raabe 4994d0597f set env var via environment file 2020-10-20 15:14:36 +02:00
Moritz Raabe 76b46d7957 ensure function is defined in vivisect (or do so) 
and show features in IDA
 2020-10-20 15:09:07 +02:00
Moritz Raabe 0a369c548b extract ordinal and name imports 2020-10-20 14:56:38 +02:00
Moritz Raabe 9a738ba413 extract api features for thunk chains 
closes #341
 2020-10-20 14:49:09 +02:00
Moritz Raabe bc1c5a59f8 display value including 0 2020-10-05 22:10:04 +02:00
Moritz Raabe 77b412c1e8 add long description and other improvements 2020-10-02 17:08:03 +02:00
Moritz Raabe 00bc1a169e render mbc table 2020-10-01 11:10:03 +02:00
Moritz Raabe 1cb9ed9c01 addressing final comments 2020-09-25 18:38:46 +02:00
Moritz Raabe 00b7f2e02f addressing Willi's feedback 2020-09-24 20:23:15 +02:00
Moritz Raabe 4691302a78 parse descriptions for statements 2020-09-24 15:35:30 +02:00
Moritz Raabe 7e9a3d649a use embedded icon 
(cherry picked from commit bbc41dff09)
 2020-09-02 17:50:25 +02:00
Moritz Raabe d6aa10164a menu changes and rebase hook 
(cherry picked from commit 2924c973eb)
 2020-09-02 17:16:11 +02:00
Moritz Raabe 198fabdd2d add form icon and other cosmetic changes 
(cherry picked from commit 98ed862d3c)
 2020-09-02 17:15:16 +02:00
Moritz Raabe 34e7991081 black 20.8b1 updates 2020-08-27 11:26:28 +02:00