Skip to content

Instantly share code, notes, and snippets.

View mlaferrera's full-sized avatar

Marcus LaFerrera mlaferrera

45 followers · 22 following
View GitHub Profile
@mlaferrera
mlaferrera / yara_dispatcher.py
Last active October 3, 2020 17:39
initial yara dispatcher plugins
#!/usr/bin/env python3
# Copyright 2014-2017 PUNCH Cyber Analytics Group
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
@mlaferrera
mlaferrera / floss-lite.py
Created June 20, 2018 13:38 — forked from williballenthin/floss-lite.py
#!/usr/bin/env python3
'''
A simplified FLOSS implementation that only supports stackstrings.
requirements:
- yara-python
- unicorn
author: Willi Ballenthin
email: william.ballenthin@fireeye.com
@mlaferrera
mlaferrera / multi.py
Last active May 18, 2018 20:25
Multi worker plugin
import os
import argparse
from stoq.args import StoqArgs
from stoq.plugins import StoqWorkerPlugin
class MultiWorker(StoqWorkerPlugin):
def __init__(self):
@mlaferrera
mlaferrera / gist:8a7af4f77b0183f9f651
Created March 19, 2015 00:51
Disable automatic login with Custom Ubuntu Remix
## Ensure you are chroot'ed into the image source
sed -i -e "s/if \[ -n \"\$USERNAME\" \]/if \[ -n \"\" \]/" /usr/share/initramfs-tools/scripts/casper-bottom/25configure_init
## use `mkpasswd` to generate the password to replace below
sed -i -e "s/U6aMy0wojraho/NEW PASSWORD HASH/" /usr/share/initramfs-tools/scripts/casper-bottom/25adduser
# Ensures all changes made to casper are in the image.
update-initramfs -u -k all
@mlaferrera
mlaferrera / keybase.md
Last active June 11, 2019 12:38

Keybase proof

I hereby claim:

  • I am mlaferrera on github.
  • I am mlaferrera (https://keybase.io/mlaferrera) on keybase.
  • I have a public key ASCm2qLLHHuhJ00lF3UGvASKFia6F4pxX1fZlB3iW7UD6Qo

To claim this, I am signing this object: