INNER CODE UNIT · Python

payloads

gendigitalinc/ioc · Manjusaka/rip.py:50

    payloads = list(items)[-2:]

    if len(payloads) < 2:
        print('Payloads not found..')
        sys.exit()

    payload_1_start = payloads[0].start()
    payload_1_end = payloads[1].start()
    payload_1_buff = buff[payload_1_start+20:payload_1_end]
    decode_payload(payload_1_buff)

    payload_2_start = payload_1_end
    payload_2_end = re.search(b'[0-9a-f]{4}?\x00', buff[payload_2_start:]).start() + 4 + payload_2_start
    payload_2_buff = buff[payload_2_start+20:payload_2_end]
    decode_payload(payload_2_buff)

if __name__ == "__main__":
    main()

View source record →