16 lines
No EOL
321 B
Text
16 lines
No EOL
321 B
Text
rule android_meterpreter
|
|
{
|
|
meta:
|
|
author="73mp74710n"
|
|
comment="Metasploit Android Meterpreter Payload"
|
|
|
|
strings:
|
|
$checkPK = "META-INF/PK"
|
|
$checkHp = "[Hp^"
|
|
$checkSdeEncode = /;.Sk/
|
|
$stopEval = "eval"
|
|
$stopBase64 = "base64_decode"
|
|
|
|
condition:
|
|
any of ($check*) or any of ($stop*)
|
|
} |