Sneed-Reactivity/yara-mikesxrs/Brian Carter -carterb/injector_panel_sqlite.yar
Sam Sneed 08e8d462fe OMG ISTG PLS WORK
RED PILL 🔴 💊
2024-07-25 12:43:35 -05:00

21 lines
553 B
Text

rule INJECTOR_PANEL_SQLITE
{
meta:
description = "Find sqlite dbs used with tables inject panel"
author = "Brian Carter"
last_modified = "August 14, 2017"
strings:
$magic = { 53 51 4C 69 74 65 20 66 6F 72 6D 61 74 20 33 00 }
$txt1 = "CREATE TABLE Settings"
$txt2 = "CREATE TABLE Jabber"
$txt3 = "CREATE TABLE Users"
$txt4 = "CREATE TABLE Log"
$txt5 = "CREATE TABLE Fakes"
$txt6 = "CREATE TABLE ATS_links"
condition:
$magic at 0 and all of ($txt*)
}