Adding base64 rule

7af68d19 · Xumeiquer · b93b92a8 · 7af68d19
Commit 7af68d19 authored Aug 02, 2016 by Xumeiquer
Hide whitespace changes
Inline Side-by-side

Showing with 9 additions and 0 deletions

base64.yar Crypto/base64.yar +9 -0

No files found.
--- a/Crypto/base64.yar
+++ b/Crypto/base64.yar
+rule contentis_base64 : Base64
+{
+    meta:
+        author = "Jaume Martin"
+    strings:
+        $a = /([A-Za-z0-9+\/]{4})*([A-Za-z0-9+\/]{2}==|[A-Za-z0-9+\/]{3}=)?/
+    condition:
+        $a
+}