Skip to content

Instantly share code, notes, and snippets.

@kirantambe
Last active Jul 3, 2019
Embed
What would you like to do?
Install yara and yara-python with androguard, dotnet and cuckoo modules
brew install jansson # OR apt-get install libjansson-dev for debian based linux distros
git clone https://github.com/VirusTotal/yara.git
cd yara/libyara/modules/
curl -O https://raw.githubusercontent.com/Anlyz/androguard-yara/master/androguard.c
sed -i -e 's/MODULE(cuckoo)/MODULE(cuckoo)'$'\\\nMODULE(androguard)/g' module_list
cd ..
sed -i -e 's~MODULES += modules\/cuckoo.c~MODULES += modules\/cuckoo.c'$'\\\nMODULES += modules/androguard.c~g' Makefile.am
cd ..
./bootstrap.sh
./configure --enable-cuckoo --enable-dotnet --enable-magic
make
sudo make install
echo "Done installing yara"
cd ..
git clone https://github.com/VirusTotal/yara-python.git
cd yara-python
python setup.py build
sudo python setup.py install
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment