Commit Graph

686 Commits

Author SHA1 Message Date
WerWolv
b2ff4dc4c0 patterns: Added Nintendo Switch NRO format pattern (#22)
* add intel_hex format (#15)

* pattern: Added Nintendo Switch NACP file format pattern (#21)

* patterns: Added Nintendo Switch NRO format pattern

Co-authored-by: Matt Farstad <matthewwilliamfarstad@gmail.com>
2021-11-28 15:09:30 +01:00
WerWolv
c2209e6007 includes/std: Added std::file helpers 2021-11-28 15:09:30 +01:00
WerWolv
8e2ea5c330 includes/std: Added hash module 2021-11-28 15:09:30 +01:00
WerWolv
34abca0ee3 includes/std: Added to_upper, to_lower and replace string function 2021-11-28 15:09:30 +01:00
WerWolv
55a15dc14b includes/std: Added sign, copy_sign, factorial, comb and perm math functions 2021-11-28 15:09:30 +01:00
WerWolv
44fee9ecdc includes/std: Fixed std::ptr functions calculating base wrong 2021-11-28 15:09:30 +01:00
WerWolv
348d16d99b includes/std: Added string reverse function 2021-11-28 15:09:30 +01:00
WerWolv
3160e592b5 patterns: Java class pattern tabs -> spaces 2021-11-21 10:51:56 +01:00
WerWolv
a10170c697 pattern: Added Java class pattern 2021-11-21 00:45:10 +01:00
WerWolv
b2f58d876d includes/libstd: Fixed missing semicolon in fixed point library 2021-10-20 15:13:26 +02:00
WerWolv
c24f1f28d2 pattern: Added Nintendo Switch NACP file format pattern (#21) 2021-10-17 23:30:33 +02:00
Matt Farstad
9da4707ac3 add intel_hex format (#15) 2021-10-17 19:30:56 +02:00
WerWolv
f5602b672c includes/std: Added fixed point change_precision function 2021-10-04 20:32:07 +02:00
WerWolv
e35ab5b459 includes/std: Fixed wrong name of ispunct function 2021-10-04 20:31:49 +02:00
WerWolv
5a22ecd15e includes/std: Added ptr helpers 2021-10-04 20:31:12 +02:00
WerWolv
935a1b7e3b includes/std: stdint -> cint 2021-10-04 20:30:57 +02:00
WerWolv
4eff8460ba includes: Added pattern language standard library (#19)
* libstd: Initial standard library work

bit operations, fixed point, numeric limits and math functions

* libstd: Added ctype, rustint, stdint and string library, expand bit, fxpt and math library

* patterns: Drastically improve ELF pattern

* patterns: Added atmosphere AFE2

* patterns: tabs -> spaces

* patterns: Added archive file pattern
2021-09-30 12:55:42 +02:00
WerWolv
71501923c9 yara: Moved official rules to separate folder 2021-09-23 01:39:59 +02:00
WerWolv
be2a6ca58e Added yara rules submodule 2021-09-14 00:04:56 +02:00
WerWolv
794617df46 constants: Added crc16, crc32, http and linux error constants 2021-09-09 12:30:29 +02:00
WerWolv
6576e8ba54 tips: Added initial imhex and re tips 2021-08-22 00:48:55 +02:00
Fabian Wahlster
0bed03fd88 Pattern for SPIR-V 1.5 rev 4 (#17)
* Patter for SPIR-V 1.5 rev 4

* Merge headers into spirv.hexpat

* use padding for Version
2021-06-17 16:52:18 +02:00
Ilja van Sprundel
d672934033 Add pcap support to hex patterns (#16)
* Add initial pcap support 

Assumes little endian and fixed to 1000 packets, but it's a start.

* update readme for pcap entry

added initial pcap support
2021-06-02 16:08:25 +02:00
WerWolv
7c3db44abc patterns: Fix removal of nextAfter builtin function 2021-05-22 00:03:05 +02:00
ThisALV
72ea939745 patterns: Handle application/x-sharedlib mime-type as ELF binary (#13)
* Fix : Added pragma for multiple PE MIME types.

* Use magic db instead of application/octet-stream MIME-type.

* Fix: handles shared libs mime type as ELF format

* Updates README.md for new ELF mime-type
2021-04-20 21:52:13 +02:00
ThisALV
38a26771a2 magic: Added additional PE mime types (#10)
* Fix : Added pragma for multiple PE MIME types.

* Use magic db instead of application/octet-stream MIME-type.

* Fix: Adds mime-type descriptions
2021-04-14 12:13:37 +02:00
Quentin Fan-Chiang
0488b98b88 Patterns for .zip files and .wav files (#12)
* create .wav file pattern

* create .zip file pattern

* update readme with wav and zip

* update some names in wav pattern
2021-03-30 20:55:52 +02:00
Matthias Mailänder
92d0abc57d Add a simple BMP parser. (#11) 2021-03-30 20:55:14 +02:00
ThisALV
2f41f6e233 Improved PE patterns for both x86 and x64 files. (#9)
* Improved PE patterns for both x86 and x64 files.

Added sections table and data directories.
Support for 64bits binaries.
Separated files for 32bits and 64bits binaries.

* Deleted old PE pattern.

* Single file used for both PE32 and PE32+.

Change FORMAT preprocessor constant to switch mode.

* Improved sections table localization.

Using recently added nextAfter() builtin-function to locate sections
table.

* Automatic detection for 64bits executables.

Automatically detect if PE32+ format is enabled by checking machine
value.

* Updated README.md for single PE hexpat file.

* Use String for sections name.

* Remove silly usage of define preprocessor.
2021-01-24 14:31:51 +01:00
ThisALV
bec4233ff6 Fixed ELF header pattern (#7)
* Fixed ELF header pattern

* Fix : missing pattern offset
2020-12-21 21:03:59 +01:00
Matt Farstad
f93971dfe4 Added MIDI pattern (#5) 2020-12-12 00:29:36 +01:00
WerWolv
f5e5345aa6 This looked better in VS Code 2020-12-03 21:52:39 +01:00
WerWolv
f2e5ae6b4b Fixed typo 2020-12-03 21:51:21 +01:00
WerWolv
ddd7cdc5be Wrote proper readme 2020-12-03 21:50:05 +01:00
WerWolv
f2d85fd506 Uploaded currently available files 2020-12-03 21:49:54 +01:00
WerWolv
83b9faf43e Initial commit 2020-12-03 21:17:55 +01:00