Skip to content

Instantly share code, notes, and snippets.

Javier Rascón Mesa halos

Block or report user

Report or block halos

Hide content and notifications from this user.

Learn more about blocking users

Contact Support about this user’s behavior.

Learn more about reporting abuse

Report abuse
View GitHub Profile
halos / doc_equations.yar
Created Mar 21, 2018
Yara rule to detect word documents with equations (CVE-2017-11882 / CVE-2018-0802)
View doc_equations.yar
rule doc_equations {
author = "Javier Rascon Mesa"
description = "Detects documents that contains equations"
$hdr_0 = {d0 cf 11 e0}
$hdr_1 = "{\\rt" ascii
halos / gist:3945561
Created Oct 24, 2012
Code to get a domain from an URL
View gist:3945561
dom = url.split('//')[-1]
dom = dom.split('/')[0]
You can’t perform that action at this time.