Banana Headshot

Jason Alvarez

Full Stack Cloud Security Engineering

Yara CryptoHunter

Yara rules to match any cryptocurrency exchange's api.

0xbanana

1 minute read

Yara CryptoHunter

Yara rules to match any cryptocurrency exchange’s api.

Installation & Usage

Download to your project directory, run with yara

~ $ yara -s CryptoExchangeApi.yar test.txt
CryptoExchangeApi test.txt
0x17ed:$a: api.binance.com
0x5c7d:$a: api.binance.com
0xf8c:$a3: anybits.com/api
0xfac:$a3: anybits.com/api
0xfdf:$a3: anybits.com/api
0x179f:$aa7: api.fcoin.com
0x1792:$aac: api.gdax.com
0x2315:$aaj: api.itbit.com

https://github.com/cryptodefense/PasteHunter-Yara

– Enjoyed the post? Let me know! πŸ’›πŸ¦„πŸ”–

Recent posts

See more

About

CEO - Hacker | #infosec #DFIR #privacy | πŸ‡©πŸ‡΄πŸ‡ΊπŸ‡Έ | Proud Dad | he/him | ex: @accenture @intel @mandiant @apple @cisco @nasdaqomx | #firespinner πŸ”₯