Skip to content

Instantly share code, notes, and snippets.

@moranned
moranned / dumpYara.py
Last active August 29, 2015 14:06
Create Yara rules based on unique peresources or sections
import ConfigParser
import optparse
import binascii
import hashlib
import pefile
import sys
def dumpPEResource(f,r):
try:
pe = pefile.PE(f)
@moranned
moranned / getSSLCert.py
Created September 29, 2014 10:01
grabs SSL Cert from specified Domain/IP
import ssl
import sys
import optparse
import ConfigParser
import OpenSSL
def getCertificate(s):
cert_pem = ssl.get_server_certificate((s, 443))
cert_der = ssl.PEM_cert_to_DER_cert(cert_pem)
import OpenSSL
import sys
def parseCert(certFile):
cert = open(certFile, 'rb')
x509 = OpenSSL.crypto.load_certificate(OpenSSL.crypto.FILETYPE_PEM, cert.read())
subject = x509.get_subject()
issuer = x509.get_issuer()
__author__ = 'moranned'
import argparse
import binascii
def printArray(s, key):
b = bytearray(s)
for i in range(len(b)):
b[i] ^= key
enc = binascii.hexlify(b)