Skip to content

Instantly share code, notes, and snippets.

@sysopfb
Created September 2, 2021 15:43
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save sysopfb/ab708097029f32db94cc105747cd169c to your computer and use it in GitHub Desktop.
Save sysopfb/ab708097029f32db94cc105747cd169c to your computer and use it in GitHub Desktop.
sc_in_jquery.yar
rule sc_in_jquery
{
strings:
$a = {5? 8b [1-3] 83 ?? 04 8b [1-2] 31 [1-2] 83 ?? 04 5? 8b [1-2] 31 ?? 8?}
$b = "jquery.org/license" nocase
condition:
all of them
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment