Skip to content

Instantly share code, notes, and snippets.

@kirantambe
Last active July 4, 2023 15:48
  • Star 1 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
Star You must be signed in to star a gist
Save kirantambe/f9e392eb6248b07eca9be1af4fda766e to your computer and use it in GitHub Desktop.
Install yara and yara-python with androguard, dotnet and cuckoo modules
brew install jansson # OR apt-get install libjansson-dev for debian based linux distros
git clone https://github.com/VirusTotal/yara.git
cd yara/libyara/modules/
curl -O https://raw.githubusercontent.com/Anlyz/androguard-yara/master/androguard.c
sed -i -e 's/MODULE(cuckoo)/MODULE(cuckoo)'$'\\\nMODULE(androguard)/g' module_list
cd ..
sed -i -e 's~MODULES += modules\/cuckoo.c~MODULES += modules\/cuckoo.c'$'\\\nMODULES += modules/androguard.c~g' Makefile.am
cd ..
./bootstrap.sh
./configure --enable-cuckoo --enable-dotnet --enable-magic
make
sudo make install
echo "Done installing yara"
cd ..
git clone https://github.com/VirusTotal/yara-python.git
cd yara-python
python setup.py build
sudo python setup.py install
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment