Discover and read the best of Twitter Threads about #regex
Most recents (12)
Go is a programming language that comes with a rich standard library containing many useful packages and modules. In this, I provide an overview of the standard library modules in Go.
#golang #library
🧵👇
#golang #library
🧵👇
Ursnif Loader (Javascript) - Manual Decoding Using Cyberchef
[1/13] 👇🧵
#Cyberchef #Decoding #Ursnif #Malware
[1/13] 👇🧵
#Cyberchef #Decoding #Ursnif #Malware
[1.1] A quick summary/TLDR before we get started
- Remove comments (manually or using regex)
- Remove "split" strings (manually or using regex)
- Remove obfuscated numbers
- (optional) Rename Variables
- Apply beautifier and syntax highlight
- Remove comments (manually or using regex)
- Remove "split" strings (manually or using regex)
- Remove obfuscated numbers
- (optional) Rename Variables
- Apply beautifier and syntax highlight
[2] First, I downloaded the sample from Malware Bazaar and loaded it into a safe analysis VM.
You can find the same sample here
bazaar.abuse.ch/sample/2a72302…
You can find the same sample here
bazaar.abuse.ch/sample/2a72302…
Potential #DanaBot Loader - De-Obfuscation using CyberChef and Python.
Sample: bazaar.abuse.ch/sample/80aad66…
C2: 0/90 VT
Script: 5/59 VT
[1/5] 👇
#Regex #python #cyberchef #malware
Sample: bazaar.abuse.ch/sample/80aad66…
C2: 0/90 VT
Script: 5/59 VT
[1/5] 👇
#Regex #python #cyberchef #malware
[2/5] Note the initial script contains a large amount of junk comments to mask the "real" code.
These can be removed using #cyberchef and a short #regex.
Find and Replace
^(REM|').*\n
These can be removed using #cyberchef and a short #regex.
Find and Replace
^(REM|').*\n
[3/5] There are some long junk numbers scattered throughout the code.
Personally, I decoded with Python and an eval inside of a safe VM.
Personally, I decoded with Python and an eval inside of a safe VM.
As the #rstats course material is not public (yet?) or available as online training (yet?), I thought I am sharing some slides from the deck.
The course covers all steps of the #DataScience workflow as featured in @hadleywickham's fantastic #R4DS 📕 r4ds.had.co.nz/index.html
The course covers all steps of the #DataScience workflow as featured in @hadleywickham's fantastic #R4DS 📕 r4ds.had.co.nz/index.html
The fundamentals of R includes:
* values
* assignments and objects
* functions
* data types
* unknown values
* vectors
* factors
* packages
* tabular data
* data generation
* data import
* values
* assignments and objects
* functions
* data types
* unknown values
* vectors
* factors
* packages
* tabular data
* data generation
* data import
(Possible) AsyncRat loader - Interesting regex to decode the obfuscated C2.
Script was found on host with an active #AsyncRat infection.
#malware #regex #decoding
Script was found on host with an active #AsyncRat infection.
#malware #regex #decoding
[1/6] The team at @HuntressLabs are still observing IronPython executables used to load #malware.
In these cases - IronPython (ipyw.exe) file is typically renamed to SupportTool.exe or Ctfmon.exe
Since ipyw.exe is "legitimate", the VT detection rate is very low (0/72).
In these cases - IronPython (ipyw.exe) file is typically renamed to SupportTool.exe or Ctfmon.exe
Since ipyw.exe is "legitimate", the VT detection rate is very low (0/72).
[2/6] The "update.py" is where the malicious action starts.
This is usually a simple python file containing an additional obfuscated script.
Below you can see this decoded via #CyberChef.
This is usually a simple python file containing an additional obfuscated script.
Below you can see this decoded via #CyberChef.
Pro Tip >> Here is how to become a #regex (regular expressions) power user overnight...
Regular expressions (also called regex) are used to check for a pattern in a string.
For example ^Colou?r$ is a regular expression that matches both the string: 'color' and 'colour'.
Regular expressions (also called regex) are used to check for a pattern in a string.
For example ^Colou?r$ is a regular expression that matches both the string: 'color' and 'colour'.
Regex comes in many flavours based on the type of syntax being used. These flavours are called the regex engine.
The most popular regex engines are PCRE (PHP), JavaScript, Python and Golang.
The most popular regex engines are PCRE (PHP), JavaScript, Python and Golang.
Different regex engines support different types of syntax, and the meaning of metacharacters may change depending on the regex engine being used.
Thus, a regular expression considered valid under one regex engine may not be considered valid under another.
Thus, a regular expression considered valid under one regex engine may not be considered valid under another.
Secret Regex List
List of regular expressions to search for API keys and other juicy info.
Useful when searching in public code repositories as well as when researching files on the computer/server that is your target.
github.com/h33tlit/secret…
#regex #api
🧵
List of regular expressions to search for API keys and other juicy info.
Useful when searching in public code repositories as well as when researching files on the computer/server that is your target.
github.com/h33tlit/secret…
#regex #api
🧵
You can check how the regular expressions in the list above work on the grep.app.
This tool searches code from over a half million public repositories on #GitHub.
🧵
This tool searches code from over a half million public repositories on #GitHub.
🧵
If you want to search for API keys in files on the computer/server, any of the many grep utilities can be used.
Their list with a brief description can be found in this repository:
github.com/cipher387/awes…
#regex #grep #osint
🧵
Their list with a brief description can be found in this repository:
github.com/cipher387/awes…
#regex #grep #osint
🧵
¿Conoces qe son las expresiones regulares y su utilidad en SEO'
Si la respuesta es no este hilo #SEO sobre #regex te será de gran utilidad.
Dentro HILO 🧵
Si la respuesta es no este hilo #SEO sobre #regex te será de gran utilidad.
Dentro HILO 🧵
¿Qué son las expresiones regulares (Regex) y para que sirven?
Las expresiones regulares (También conocidas como Regex) te permitirán buscar y encontrar una determinada frase dentro de un texto de forma rápida.
Las expresiones regulares (También conocidas como Regex) te permitirán buscar y encontrar una determinada frase dentro de un texto de forma rápida.
¿Cuándo se utilizan las REGEX?
Una Regex se podrás utilizar siempre y cuando exista un patrón detectable dentro de una frase, un código o un texto.
Una Regex se podrás utilizar siempre y cuando exista un patrón detectable dentro de una frase, un código o un texto.
New post! Blocking Resources in Playwright 🚧
Save time and money by downloading only the essential resources while web scraping or testing.
zenrows.com/blog/blocking-…
Save time and money by downloading only the essential resources while web scraping or testing.
zenrows.com/blog/blocking-…
Learn how to use @playwrightweb in #python to avoid CSS files, images, or Javascript from loading and executing.
You can use glob ("**/*.svg") or #regex (r"\.(jpg|png|svg)$").
You can use glob ("**/*.svg") or #regex (r"\.(jpg|png|svg)$").
For more general use, you can access requests resource type, for example image:
route.request.resource_type == "image"
And being even more aggressive, allow only documents:
route.request.resource_type != "document"
playwright.dev/python/docs/ne…
route.request.resource_type == "image"
And being even more aggressive, allow only documents:
route.request.resource_type != "document"
playwright.dev/python/docs/ne…
How to get archive catalog entries from PDF to a spreadsheet, using Zotfile and regular expressions. Still plan to do a video on this later, but for now here’s the process via thread. #twitterstorians #regex 1/
What you'll need: app to mark up the PDF (I use iAnnotate on the iPad; Preview works too), @Zotero plus Zotfile, non-Word text editor (I use TextMate on Mac; hear Notepad++ is great for PC) for regular expressions, spreadsheet app 2/
Regular expressions are a sort of syntax used across varying programming languages. Think of them as a fancy find-and-replace. I can't do them justice here (there are plenty of guides online), but here's a cheat sheet for the commands I model here 3/
This year for #merryCSSmas I'll be covering some of the most requested styling features and how they can be used with CSS. This will be a month-long series showing ways that simple, valid CSS, and simple JavaScript functions can work together to style anything you can imagine!
Dec 1: Parent Selector 🎄🎁 Though CSS doesn't have a :parent selector, you can create your own with a small JavaScript function and use a selector like [--parent] in your CSS stylesheets today!
demo: codepen.io/tomhodgins/pen…
code: npmjs.com/package/jsincs…
#css #javascript
demo: codepen.io/tomhodgins/pen…
code: npmjs.com/package/jsincs…
#css #javascript
![Supporting your own parent selector in CSS with [--parent]](https://pbs.twimg.com/media/DtXaDW7VAAALAgA.png)
Dec 2: The :has() Selector ⭐️✨ Even though this selector has been specced in CSS for years, no browsers support it yet. Thankfully it's easy for us to support with a selector like [--has] in our CSS
demo: codepen.io/tomhodgins/pen…
code: github.com/tomhodgins/jsi…
#rwd #webdesign
demo: codepen.io/tomhodgins/pen…
code: github.com/tomhodgins/jsi…
#rwd #webdesign
Não deu pra ir no #codabr18? Foi, mas queria mesmo era se clonar pra ver as muitas atividades simultâneas? A gente reuniu quase 40 apresentações e recursos didáticos usados nas mesas, bootcamps e workshops! Conhecimento bom é conhecimento aberto! #ddj escoladedados.org/2018/11/21/apr…
Vamos revisitar aos poucos as apresentações do #CodaBr18 :
Na abertura, o @albertocairo abordou a democratização da visualização de dados, falando de sua busca para que esta prática se torne uma linguagem universal 🌐
drive.google.com/file/d/1PrDaDB…
Na abertura, o @albertocairo abordou a democratização da visualização de dados, falando de sua busca para que esta prática se torne uma linguagem universal 🌐
drive.google.com/file/d/1PrDaDB…
Já @viegasf falou de suas pesquisas sobre inteligência artificial, #dataviz e inovação no Google. Aqui, você confere a oficina que ela deu sobre Interpretação e Fairness em Machine Learning
bit.ly/mlfairness-coda
bit.ly/mlfairness-coda
