Good day Guys
Our good friends are at it again.
https://pastebin.com/raw/vjFcPzLE
I haven't written anything yet.
Thought I would share in the mean time.
Regards
Brent
On 2020/04/22 16:44, Brent Clark wrote:
I want to add, I tried this as well, and it *did* match. But it feels
clunky.
https://pastebin.com/raw/7FaqnByB
Regards
Brent
On 2020/04/22 16:14, Brent Clark wrote:
Sorry in that example I copied body.
I tried rawbody and body.
Regards
Brent
On 2020/04/22 16:11, Brent Clark wrote:
Good day Guys
I would like to ask it someone could help write a rule for the
following base64 encoded sextorsion.
https://pastebin.com/raw/MWYmfkuh
I tried using rawbody. But it was proving to not work and be the
right solution. Below is it me testing.
i.e.
body BASESEX /8J2XrvCdmIHwnZiB8J2XsvCdl7vwnZiB8J2XtvCdl7zwnZe7/
describe BASESEX Base64 Sextorsion
score BASESEX 2.0
If anyone could assist, it would be appreciated.
King regards
Brent Clark
