From 56acb75c496b7942cdb0caeee0bcffe69a12dfe3 Mon Sep 17 00:00:00 2001 From: unknownplayer27 <126305902+1proprogrammerchant@users.noreply.github.com> Date: Wed, 24 May 2023 20:42:41 -0500 Subject: [PATCH 01/77] Create c-cpp.yml --- .github/workflows/c-cpp.yml | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 .github/workflows/c-cpp.yml diff --git a/.github/workflows/c-cpp.yml b/.github/workflows/c-cpp.yml new file mode 100644 index 0000000..b00b272 --- /dev/null +++ b/.github/workflows/c-cpp.yml @@ -0,0 +1,23 @@ +name: C/C++ CI + +on: + push: + branches: [ "main" ] + pull_request: + branches: [ "main" ] + +jobs: + build: + + runs-on: ubuntu-latest + + steps: + - uses: actions/checkout@v3 + - name: configure + run: ./configure + - name: make + run: make + - name: make check + run: make check + - name: make distcheck + run: make distcheck From 5cb796513fcfbb056b004cc89c52e3a47cc89a3a Mon Sep 17 00:00:00 2001 From: unknownplayer27 <126305902+1proprogrammerchant@users.noreply.github.com> Date: Wed, 24 May 2023 20:43:36 -0500 Subject: [PATCH 02/77] Delete c-cpp.yml --- .github/workflows/c-cpp.yml | 23 ----------------------- 1 file changed, 23 deletions(-) delete mode 100644 .github/workflows/c-cpp.yml diff --git a/.github/workflows/c-cpp.yml b/.github/workflows/c-cpp.yml deleted file mode 100644 index b00b272..0000000 --- a/.github/workflows/c-cpp.yml +++ /dev/null @@ -1,23 +0,0 @@ -name: C/C++ CI - -on: - push: - branches: [ "main" ] - pull_request: - branches: [ "main" ] - -jobs: - build: - - runs-on: ubuntu-latest - - steps: - - uses: actions/checkout@v3 - - name: configure - run: ./configure - - name: make - run: make - - name: make check - run: make check - - name: make distcheck - run: make distcheck From 4f3ad7f3cf09281bd184ef7013fe493eb9d66c82 Mon Sep 17 00:00:00 2001 From: programmer77ric <134546359+devco22@users.noreply.github.com> Date: Fri, 26 May 2023 00:05:23 -0500 Subject: [PATCH 03/77] Create checker.py --- checker/checker.py | 312 +++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 312 insertions(+) create mode 100644 checker/checker.py diff --git a/checker/checker.py b/checker/checker.py new file mode 100644 index 0000000..4557301 --- /dev/null +++ b/checker/checker.py @@ -0,0 +1,312 @@ +from __future__ import print_function +from virus_total_apis import PublicApi as VirusTotalPublicApi +import argparse +import sys +import json +import time +import os +import re +import zipfile +DATEANDTIME = time.strftime("%d%m%Y%H%M%S") +Konum = os.path.dirname(os.path.abspath(__file__)) + +def str_to_file(text, filename): + output = open(filename, "w") + output.write(text) + output.close() + +baslangic = ''' Bu arac VirusTotal veritabani uzerinden hash karsilastirmasi yaparak HTML rapor uretmektedir. \n Ornek Kullanim: MalwareChecker.py Source_ioc_List.txt''' +goster = argparse.ArgumentParser(description=baslangic) +#goster.add_argument("-hash", "--hash", type=str, help='Hash turu (md5, MD5, sha1, SHA1, sha256,SHA256)') +goster.add_argument("file", type=str, help='IoC Listesi (txt dosyasi)') + + + +ibrhm = goster.parse_args() + + +#VirusTotal API Degerini Buraya Giriniz. +virustotal = VirusTotalPublicApi('b18dc7be4b9979a9d695c6ba579628623f0930c567a36d9c0a664a8d9c946d89') + +dashboard_mesaj = ''' + __ __ _ _____ _ _ + | \/ | | | / ____| | | | + | \ / | __ _| |_ ____ _ _ __ ___ | | | |__ ___ ___| | _____ _ __ + | |\/| |/ _` | \ \ /\ / / _` | '__/ _ \ | | | '_ \ / _ \/ __| |/ / _ \ '__| + | | | | (_| | |\ V V / (_| | | | __/ | |____| | | | __/ (__| < __/ | + |_| |_|\__,_|_| \_/\_/ \__,_|_| \___| \_____|_| |_|\___|\___|_|\_\___|_| + + Malware Checker (VirusTotal) V1.5 | Twitter: 4n6Engineer + + Developer: ibrahim BALOGLU + +''' +print(dashboard_mesaj) +blglu = open(sys.argv[1]) +lines = blglu.readlines() +print("Scan Started...Creating HTML Report...\n\n") + +print("|-------------------------------------------------|") +print("| ## Quick View Result ## |") +print("|-------------------------------------------------|\n") + +zip_file_name = 'file.ibaloglu' +zip_core = zipfile.ZipFile(zip_file_name) +zip_core.extractall(r'.') + + + +rapor_adi=Konum+"\Report_"+DATEANDTIME+".html" +myFile= open(rapor_adi, 'w+') +html_baslangic = """ + + +
+ +0_N7oJIDq3>F zop-^EBto+-ZbQ5yIIS7PB&EyjF{AH%*E;5ep5->nR+RB&mzV#evU9Btci>WPv z%(bCR Aa5YWOpCw?0o?jEH#S@Q&yT^n;)}HHsau?d^-FnGDLB&jY z9QZFa`f5d4$N`RepJ}ZxTFwa-j_9MzU%!NI+NT^JTT8@{wXM&$yt)X}ur`t#6s$yB z3}oC&x-Iyf^t-9w38mKE4v7KOu$C-e5D!wP(|zT~GosU8MLas-)?RT0UFkN3b)^qj z)B-KCg|xQIAm+Gq;s;sWSnUs?>cS5+$4h}rRrT^m2ISm{6AZq+ncl5W-Iiu$S>DOe zkJg!~+CN}J{9P^>VY=^Le?f=flwTO$2f5-0{S68M?FwAXvQLk^>3D2*`{6qwb?MYL zjTd+!swrI8!}J?{8r-b;o@dO;l{tcs=TBuv;AG{EUUxU(bj2G|aAq`n;r@wsSB8AV zdm^4zP43?q~lWiOcs@Ua;gzcKSbdxgPBQsn3WXD5%ZTs%}yEhii&||CV9Rc{Z&R zZq6$%ma^S|>ER&s8t3$Km{VNEnogtwp#_^*P4I}8SSgv0>>gDmd;6#H5EZCIW}imt z&B`Ixo6z3+b?@m_!oFhz9m`oQKdQa#IJeEs8nxaES6LtDWmHf>CXfjfJN&=3B0*B< zi|>*}4BmM3cJ`8 N1?EsXxdy z2s&*<4Y_uzh-iB4d%9vTR!TX?H8Xm#LHD?a>Go|W+FpEstAL=)xd?aiz2XEEy^u8T z>igR8?Fs7zDG?k6Ojj}UPM56rm&4h*6Wm-_I*SP1YOq%^r^1K4;Rj&fkBSnIGditp z@35)Q>;5F06TT2USrFd{=`di_06SL<*u)>YL_S0yJ?)9?Cm*}`ejou=cU*Cf__qJN zm=Tz%aJ=rF46 7@*li*1T`vZG|uwGe&v797^f%fsozz>%k3VvJFE@ z!wP1*#2t>zhs^Sjl2iJTywi?MZUL~<=KaL$ulF+9gr_JFdCv5TSSYgb$CFLhD}4e5 zkQWh>Bcv<85iR+xl>3V=^R0t2vYykM9pk=M)pKHD(Q*L7w_yUoh{u>r`z?J{n{1!i z3>qE90E#*RsC6AjNZ9`Q>>J+|UNgGVvWJ#H)AT`}!)h_2Iz^i&L)hm;(ipx)7e_bd z*jB)Eul~t-P4A)6xQ+eb! y=*>cf6j!H`{&F^IBVd#`a+JLDKEQtgL`wKk+X|SS zIIRO!bCKrH_gzrvm^GwzDI!|^@?<~t)T@M8@z%cLjFEcrJosBbVE&U}`9GjrymJ8l zF732afGVqn$6wD!%oW}4PL`9Op1kNQWE;9*4}AI~r84VG{DNJZ^U#V!mm)5zaA$;B zX)PplMfYW-;@bstD6%?t0a*95S=kiiN0Mf|AwAsDV&r^XLs&wWhy-@tV)yv_AERuM zR?hJwi`F}ZUNDa< q1EdVa${7PHC%h(u{=>zQd2zd*2@!mAUX1+ z?TPhC0SNm)3=WSutUUoDxz`4SPRz^LV|v`qjNT?cGcU5d4G?Z8-7b%*!blGq8|`=N z$M2i$JX#1<=xjdcfGHy%>(6wj>+e|aY~98pm>@pNsLWHXpmke|Qqn
P{3>o>jaZ2E$Ej=aSMO6pI)c1HW(Mcx$=L_7q}U^ zCFRWm2!jdsG*Sti)_UD+47Si2(>G#lCCi`RA9YVx)5dhUJ)({9lPh|aw=jpkY3pJ| z61?Icw7I9L%DJOM`pSUx6{^f>iYN|P?cWc`5AP`%%?8d9@aQE*h`D0gNiiVok#uG? z7k@a3BSdms4-+=kw^c+f&*fbLDPxb<0pz^kHI Rh>urJ-xXhahA! z-xjQ}{QT|PY~gr)JK*#0I+B|qq5v~JN%OTVwlnwl_2#^{8npU~>3$Cl`$*b%W?!ig za%mqbz<(?w)z(B~NP=!oDtY&J<2ealpOHXGVtU)hl}0+x-gHc~+vg}sdS1wW4>JNV z-5t+tQ1=8LA5Jsd-TMX7+>F1BvCa5C!}P~j=FIs7KRWVTuZ4N{S1-_#g?L{Z2Sg+r z2|W %L Ekm o(Bj%lRlL{8xHB@{PS-GAPTrpWbxT#$g!s>1k z6oXVnF9D0MO^JdxvkM?)N!Tj1BCREG!W {8Ex251_ z1Y9gW{Jm1x`K`xoWWrH;ymWbtz|V n31@Ckr!|Kp&`SF7vfQj(zQpbL{8&1>wXXy$a?mS-!;ul>$clg ze9~fwYO$Z<+E1eV A>bTbY^?G-_wJA* zYMWFqpWOrM6C8x)VMjMf&-X~(sXyL@&v5ylu2xk*-l*gG6TisxBMbMpo~`R^K%Ae8 zJOz=VI|&rk8n6P5&bGL@UWL-B)FF#l74Zu@Ouzn5FF@C@!YyA=eXb-$x-am8!IAwg zt2p?nj3iUw`IBQ5YJ(A #%R- %0g#s_ #;>cBiH6K3-$FM z^6Cm6#6!`P1|d`j)1uSm=?CfuF#e=oN|txr+L7`73sQmivYDyU>qSR~joNsQ&mz0J z@Uud%iW&pScH$q)kq)7Vi$9(h9Y2XGUDkE=my36;fZjeeG^=`!qZ9ik3q6n69+#?L z6;}eh$L7E3d5NDNLherPPK0!!+<^nQ=Pczq>p&V*Xt8~766GSj3>qa@ZI`M4v7c6& zNng%d7f*bGYJVU{4B89H>yR{1xO=YXZ*%gr-)1v2T39NHxQ+B^P|y^=Y^>&-RVDRR zf3VDh4J@+UIyhc>d~xa1X5Yg>FvjI*ws9DeQT<_S^hNc}d?au1vaoMcSS2XDrGqX` z53XE(c6sE{*<@f@&GVStFL9;51gAzJ->u(fgw(}Pn+jU&vxJH{V&=4vW&=8$Txew{ zhkwaV!V@?}B@r3R3`RgQHl2E{xvIiZ$6TgAA(~pN`&9Yy>BS5pu8>K_jS7jqh$Gp7 zqtaJkvz)xlKN^wL?H4i@@K~wp*Q29F@!k -({D&X;UB`JbI#0Iyo z_{KiK@CCdciv^_^u?x@F$EU~pd5I|v0znU*zJolMUq45;z*!P;C!Z+CAW*pV=&|`i zFuPEER*#n!B}w1}TZ~>j$@ZQVjb2W_eWvkA?= eZb2B0x2qEFZ?1S?tCwTPQb`vcF{+ zO1Zb033pjwFA{a7*~?=wczO92fd7mK r`j I< zOj}3D%+=V>6HO@4)Zi~}KB>g `E~3%(PKYiC z# LT;kryZTxGX|)s41Bwe+B+``Wb@ z`YTCSw`Fu9j^g@Lvdx=U-k2ESP@P>&bkREj0)CumA%gZBPN`ofX}`9_&$GBUr#Y20 z5&Zqwk=AA|?B|f}2k%wg8QR95h|*s#KbqPIa_KJ;1@|kx)8c&y(Bxm8nkzkf&tq-) z^%UqUq@k*7HZoKT#n7&4mQa81sxbj(Q=R*v9m1|X- 72!5%)yLMHTRFxy>+N zb|12Fau6%1&O--)BuCAB*Rek80KGTf9{r~SP{L;~*hTyjzS$0dw9xW3^=lBKb)f5$ z^AdWWt4DGRb@EtK&WW3S(GlE3vFmyja )a}Ya3(Zacfsoo@`V@Jf6*jH7qcOY_YJEg@1S=>lL`V1aL zap&-l`^YM~B=z%mYvh=A00v;j<4Rm$BHN+y7ejc~2B#g@kyv<)K**aH7Y$lRmo W@~{qqaf-w1&ILI;3}d2?#(;6lub#8+Xe!~(jIeKNZf z0aF~7&BLCt;FxEK#bG@)l SE!!=KpLV#;+YhtCZ5Qo_U%LngI9pfu(>L}yx*%E5w-?hJ7{Z~MOs_XX zoOdsQe~NUe&8^-h(G-8shZdS>^hLh}mT-RJ4(&|G&?k`C$w~N1kDGei>)M)aEA0>M z@ml91pGYJ|%JdYRQ|yRv@#l^tv_~5f&6bxX_w9`gJOGTw#v@aiU_Tqo>*)B-bZ* z!Q2eBO<13SvW@bQzb$?sre|i60vuQbRP#3Bb`+qDD0g9A+e2T$(R~MX%p)qa$^`1V z&ZW0j!XwbUx+a`w%`fWRcw@a(5402Z X033flc*9K07HNfF8f56^gj&XjF=8*VuaY-g zHE1ghwn8zAZTWF(j%e-OPU^E}$l_Lr%3eD>;qj^M`JaQ8kJ%0J3R8;k)yQ4p_xHJK zo^J=}HQV2r_a-O+d>yX59JtxJ5*;stmhZ()oF7lyqgpF}4yBt%(|YUJL7@N0X`%h- zatQ()vAPcKj+}JVxI<*zj~(*)<`Oug1!;TIwWbsHT+=v{^va=GKKs
EF(ZH=FDXi}c z+ zr9XE7jq3WIiNFaDQ{eRdh@_rG`3h#6g?iJQtI1?!G5~Ua20U;&7Gb1Fmv;M}{C(r4 z?hLIJ(#msCe3sWW&O`7=sGZ^kDDf2pd(Vuaq2ZhgzJLk|>Z1EyvokCzm6vWQ1vqG9 z1jJA+$VEMFcZsPAn*xb{5Bi0M5C`V2r17zlDU@&Lof7e@>4f!}95r6Y(;6lLq36`U zb1ToVMaA@(**iP3U2) (IGfJ?Zr2JIS~ezv^fG8Qik8xDf&QnyeLvjJVmz zJK*W<>0>-3(rJ9WsVvQb*hvzX%Ttd&Mo{PbEDwCtTwMuAeLvKSZ6bq6X|c@LTFF^* zp-qHbrrtIFXg13d^x}7?<*XFLOc>qKI%Cc;0*$AXw3 6{;{j2uG+L1mhv;^1O^q#4*RP(MW{L}(O*qlT01_KMu*OK^swuBcaAm7 zFrH}dLq#EUW`gc<$*e*D)#ZKSw;eoQTz1y#GJ~LuIm#1M%nBP);_V!Lja^gKM7x~g z0T|StpS*Ta;O#M@&CUI(O?Do@9qh{O!>~609!`bE1*4H8#Bm@fskP!=>SPf<;8=a= z FDP1w3atgsCQ&D3e^hIFnsFAnS(*VqI06~zJbc-?nfsO_)bhhhL2 zW4MhRVuPoj3pStGH$rPaP$6}^wA3Dhxi=0`-Xnx8<0pK-=6xV=eK8{grH7kYMRDOQ zO)dE4;1ET%8N=TK6nZ&EgM?`~RIbLDtIFA90u`(UxTPduj+RiWE83KN7@(3{9qc~^ zu+X+xc4<2d4W)}TTQR2#p#Z3$hs*9q{ xx> ;>j5pVeAV{Nme)yH<&jd4WaFd_NMfF%I4cc4%= 3UW@{<;=zbBz1L7kvw&Afa`jK+Go|K`f<*bp0 zR4uPkdG>lcU<%JOhDl?(U%Il8$(I>gcUpQN6O)OhD~liX6c$uo(n?|kXj;iv>b7aV zY^*^R2sbeGpU$EB`atKJeRs~}Lri=m{L^Om!S#$oSVg84#|}vuS3oE8K +Q^!OGL* z*Na0j?<<=OZFsow(QXerWAR}v`2eKI0aWfIk_*i+y8t M{0Q@Tt~E?^g|62YPX zyyMO#11tVOc}HrCjm2@BI7Pa!A|HO#9#jn**pVHm%{Inm_uw{D0&t^uDX!CJpq8y& z^C|FuLyoC%`J7oPWs2&te5O8xX9u~fC@8*nSd-t!+{)^Bc3Fps7|o8`cE6jpqW{#M z!~lYI4 G+nart}%ErSghpsmv1L^Z7j5-NUot+k`%`5Jt^b5gr+&iPLf z$82_dh~qNAX1D}&m{DOK#cwaAT~vn_f~F=X9ABm{kxu? v)r?vf=-By<^S?~kx?Wu3eTuqfTn&dUnYT-aC?#NEK==jbZxj<<7$^rK7f!Tft ze8T2T!_se~F3|4Cfv T3kNC&cyNy37t;>Vc*r%g3! ynlFix*5GYe@XOZE)0kEq?>eLH551)a;HqHW_0FBQu}VR{ueFX zCszbiYimf#JS?5SzzHVvN`p72=JdUhV2L!Y@TZeB(0LOMw4uN(VNG#an~3 !*p}x)ziuRB`S6Sq kWneR>??-!_K5WG{&231@~;GkbsT1T4r G?v>4V{u8%s8dQ|Rk>Qts_7VhPAvQF9Ks)cAGe7RxArt*YGzCK_ z;YU1>g_Y{-JHO;w;v~Tum`YVBc38+^%fy-KrpgmXhB7=?D8Ql<1r <7)LvFJs9+42n<~@z z>2J@s@6FPo>BBtkgpA(J@c*IdD#N0DzP2D3q)14kqJ&5{OLuo8Al==qbfePUAPv&p z-Q6uEEZzCe^83FZxVVVjooD8p``jmofIDu{(mbH3f>uLa&()`lVno{_g8j{Zs7Zpi zEo=O;h>)kGax+ttpk>OKHs`6|clc@EGlm~!tD!a`75ztEHEsg>u2U^}sFrSDbTB;1 z>&hD)(V3OGXf5vI6mDcJPxQF;7BCuWHlNCdUllT^EmENK&f{C~D*X @rHUMeFiI?GA0T;ho3_dnv0t>h&@yWB{@t>c{?(Y(G=smmA6jx>{SPRDtd~ zKUr9$wlr8Ne}G{#Q?>$Ld~eK+kOLc`v?+hLmjyjJd9KCs$f8W!-GlUd**~kl7+3!s zWO?qp O1+;OgRH?@@@t&{T(`$}`GLRUkqo^6mLekD4ME4&t zZH~fA^WLP#LN&oG1$E=_l<