Sneed-Reactivity/yara-mikesxrs/symantec/Proxy.yar
Sam Sneed 08e8d462fe OMG ISTG PLS WORK
RED PILL 🔴 💊
2024-07-25 12:43:35 -05:00

17 lines
No EOL
490 B
Text

rule Proxy
{
meta:
author = "Symantec Security Response"
date = "2015-07-01"
description = "Butterfly proxy hacktool"
reference = "https://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/butterfly-corporate-spies-out-for-financial-gain.pdf"
strings:
$str_1 = "-u user : proxy username"
$str_2 = "--pleh : displays help"
$str_3 = "-x ip/host : proxy ip or host"
$str_4 = "-m : bypass mutex check"
condition:
all of them
}