Skip to content

Releases: Neo23x0/Fnord

Fnord Version 0.6

20 Nov 14:55
Compare
Choose a tag to compare
  • The flag --yara is the default now, use --noyara to deactivate the YARA output
  • different presets are used to generate a set of possible YARA rules
  • fine tuning with -s, -k, -r, -c command line flags

screenshot 2018-11-20 at 15 13 23

screenshot 2018-11-20 at 15 19 28

Fnord Version 0.5

19 Nov 18:23
Compare
Choose a tag to compare
  • new test case: obfuscated VBS
  • scoring adjustments: structure scored higher than payload (e.g. "^ ^ ^ ^" > "hdntkwnf")
  • feature: detects uncommon casing in keywords and sets "nocase" in YARA rule