[enhancement] matcher with binary rule capability #31
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Context
I thought that a matcher with binary rule capability could be interesting like Yara rules.
It's useful to match binary files such as archives.
In fact, the need to develop a dedicated matcher comes from the native utf-8 encoding from Golang.
I wanted to bypass the issue that I can't match characters such a:
\x8a
because Golang automatically handles it as\xc2\x8a
.So finally, after contribution #31, you can now invoke a binary matcher to handle hexadecimal rules.
Example
Take a look at this template projectdiscovery/nuclei-templates#42.
To resume, it enhances the capability to use hexadecimal input.
Proposed Changes