vee1e/capa-rules
1
0
Fork 0
mirror of https://github.com/vee1e/capa-rules.git synced 2026-09-01 19:07:15 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

add rule: convert IP address (#697)

Browse source 
* add rule

---------

Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
This commit is contained in:
Moritz 2023-02-13 10:50:07 +01:00 • committed by GitHub
parent a347093210
commit c341449506
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 17 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

17
communication/ip/convert-ip-address-from-string.yml Normal file
View file

@ -0,0 +1,17 @@
# generated using capa explorer for IDA Pro
rule:
meta:
name: convert IP address from string
namespace: communication/ip
authors:
- "@mr-tz"
scope: basic block
examples:
- 0796F1C1EA0A142FC1EB7109A44C86CB:0x405D20
features:
- and:
- api: inet_pton
- optional:
- or:
- number: 2 = AF_INET
- number: 23 = AF_INET6