INNER CODE UNIT · Python

main

gendigitalinc/ioc · Manjusaka/rip.py:35

def main():
    if len(sys.argv) < 2:
        print('usage: rip.py path_to_framework_file')
        sys.exit()
    try:
        f = open(sys.argv[1],'rb')
    except Exception as e:
        print(e)
        sys.exit()
    else:
        buff = f.read()
        f.close()

    r =  re.compile(b'1f8b08000000000000ff[0-9a-f]{1024,}?')
    items = re.finditer(r, buff)
    payloads = list(items)[-2:]

    if len(payloads) < 2:

View source record →