mlaferrera

#!/usr/bin/env python3

#   Copyright 2014-2017 PUNCH Cyber Analytics Group
#
#   Licensed under the Apache License, Version 2.0 (the "License");
#   you may not use this file except in compliance with the License.
#   You may obtain a copy of the License at
#
#       http://www.apache.org/licenses/LICENSE-2.0
#

mlaferrera

#!/usr/bin/env python3
'''
A simplified FLOSS implementation that only supports stackstrings.

requirements:
  - yara-python
  - unicorn

author: Willi Ballenthin
email: [email protected]

mlaferrera

import os
import argparse

from stoq.args import StoqArgs
from stoq.plugins import StoqWorkerPlugin


class MultiWorker(StoqWorkerPlugin):

    def __init__(self):

mlaferrera

## Ensure you are chroot'ed into the image source

sed -i -e "s/if \[ -n \"\$USERNAME\" \]/if \[ -n \"\" \]/" /usr/share/initramfs-tools/scripts/casper-bottom/25configure_init

## use `mkpasswd` to generate the password to replace below 
sed -i -e "s/U6aMy0wojraho/NEW PASSWORD HASH/" /usr/share/initramfs-tools/scripts/casper-bottom/25adduser

# Ensures all changes made to casper are in the image.
update-initramfs -u -k all

mlaferrera

Keybase proof

I hereby claim:

• I am mlaferrera on github.
• I am mlaferrera (https://keybase.io/mlaferrera) on keybase.
• I have a public key ASCm2qLLHHuhJ00lF3UGvASKFia6F4pxX1fZlB3iW7UD6Qo

To claim this, I am signing this object: