William Ballenthin
c4e4eb27fb
setup: use vivisect from pypi
...
closes #254
2020-08-30 02:03:15 -06:00
Capa Bot
f9eed2d5b2
Sync capa rules submodule
2020-08-31 19:19:49 +00:00
Willi Ballenthin
a801a681b8
Merge pull request #266 from fireeye/release-v1.2.0
...
release v1.2.0
2020-08-31 10:29:38 -06:00
mike-hunhoff
c25632b12c
Merge pull request #264 from winniepe/master
2020-08-31 09:22:34 -06:00
Capa Bot
8e6974b10f
Sync capa rules submodule
2020-08-31 13:51:49 +00:00
Capa Bot
7616603b11
Sync capa rules submodule
2020-08-31 13:02:37 +00:00
winniepe
7c27af8868
Restore default expansion after unselecting 'Limit results to current function' checkbox.
2020-08-30 16:48:51 +00:00
winniepe
19e5e9b766
Expand one layer by default to make IDA navigation easier.
2020-08-30 16:27:48 +00:00
William Ballenthin
adeee3e834
changelog: don't forget to reference @edeca!
2020-08-29 22:53:51 -06:00
William Ballenthin
c2997c8033
changelog: add entry from #264
2020-08-29 22:32:24 -06:00
William Ballenthin
28b463f145
changelog: add entries for v1.2.0
2020-08-29 22:26:40 -06:00
William Ballenthin
cc59f5b91e
setup: bump version to v1.2.0
2020-08-29 21:54:16 -06:00
William Ballenthin
06ac49e629
submodule: rules, data update
2020-08-29 21:51:40 -06:00
Capa Bot
6c07617082
Sync capa rules submodule
2020-08-29 00:11:38 +00:00
Capa Bot
13390918a1
Sync capa rules submodule
2020-08-28 20:09:50 +00:00
Capa Bot
0f44ec0dd8
Sync capa-testfiles submodule
2020-08-28 19:59:22 +00:00
mike-hunhoff
c49199138e
Merge pull request #261 from fireeye/explorer_include_block_scope_limit_by_func
2020-08-28 10:46:40 -06:00
Michael Hunhoff
3f88bb8500
adding code to include basic block scope when limiting results by a function
2020-08-28 10:30:09 -06:00
Willi Ballenthin
b2b9f15bc1
Merge pull request #260 from fireeye/explorer_plugin_display_statement_description
...
explorer: display statement descriptions
2020-08-27 17:16:38 -06:00
Michael Hunhoff
d2cd224fb3
adding code to display statement description in explorer plugin UI
2020-08-27 14:49:49 -06:00
Capa Bot
aac13164a5
Sync capa rules submodule
2020-08-27 20:40:06 +00:00
Capa Bot
f2fff02b49
Sync capa rules submodule
2020-08-27 20:39:21 +00:00
Willi Ballenthin
662a7eaae6
Merge pull request #259 from recvfrom/master
...
Fix #255 : Use relative paths for the git submodule
2020-08-27 14:20:10 -06:00
Willi Ballenthin
f6ba63083b
Merge pull request #258 from recvfrom/fix-256
...
Fix 256: Pin enum34 version to 1.1.6 for python2.7
2020-08-27 14:19:43 -06:00
Andrew
49774110cc
Fix #255 : Use relative paths for the git submodule
...
Fixes #255
This enables both HTTPS and SSH to be used to checkout
the project, per https://stackoverflow.com/a/44630028/9457431
2020-08-27 15:25:14 -04:00
Andrew
c7840e0769
Fix 256: Pin enum34 version to 1.1.6 for python2.7
...
Fixes #256 - capa requires halo==0.0.30, which has a dependency on
spinners>=0.0.24. spinners 0.0.24 has a dependency on enum34==1.1.6,
but 1.1.10 gets installed and used on my machine without the version
being pinned to 1.1.6. This issue occurs when using python 2.7.
2020-08-27 14:59:58 -04:00
mike-hunhoff
d2155eb3a1
Merge pull request #257 from fireeye/fix-237
2020-08-27 12:39:20 -06:00
Michael Hunhoff
3772c5c0bc
add additional nzxor stack cookie check for IDA extractor
2020-08-27 12:32:44 -06:00
Capa Bot
d47d149196
Sync capa rules submodule
2020-08-27 16:08:48 +00:00
Capa Bot
528645c0d2
Sync capa rules submodule
2020-08-27 13:53:01 +00:00
Willi Ballenthin
7464a62943
Merge pull request #253 from fireeye/black-reformat
...
Black reformat
2020-08-27 07:50:46 -06:00
Moritz Raabe
34e7991081
black 20.8b1 updates
2020-08-27 11:26:28 +02:00
Moritz Raabe
3e20f0fc71
dos2unix
2020-08-27 11:25:43 +02:00
Capa Bot
cb9bd2eab7
Sync capa-testfiles submodule
2020-08-27 08:40:12 +00:00
Willi Ballenthin
9d102843ac
Merge pull request #251 from fireeye/bugfix-249-arch-description
...
bugfix 249
2020-08-26 17:18:34 -06:00
Michael Hunhoff
dc8870861b
fixes 249
2020-08-26 16:31:07 -06:00
Capa Bot
8be1c84fd2
Sync capa rules submodule
2020-08-25 16:35:30 +00:00
Capa Bot
739100d481
Sync capa-testfiles submodule
2020-08-25 16:34:26 +00:00
Willi Ballenthin
fd7d9aafe9
Merge pull request #247 from Ana06/test-pythons
...
Test all supported Python versions
2020-08-21 07:55:08 -06:00
Ana María Martínez Gómez
a39e3cca79
ci: test all supported Python versions
...
I assume once we migrate to Python3, we want to support Python 3.6-9.
Python 3.5 will stop receiving security fixes next month, so I don't
think we need to support it.
As running the test as many times as we want is free, run them for all
supported versions to ensure capa work in all of them.
2020-08-21 15:39:13 +02:00
Ana María Martínez Gómez
ad011b08f6
ci: use matrix in tests workflow to avoid duplication
...
Use a matrix with the Python version to avoid duplication when testing
different Python versions.
2020-08-21 15:00:06 +02:00
Capa Bot
b4fa6fc954
Sync capa rules submodule
2020-08-20 10:06:04 +00:00
Willi Ballenthin
585a9c167f
Merge pull request #243 from fireeye/fix-241
...
fix 241: string counting exception
2020-08-18 12:09:52 -06:00
Willi Ballenthin
5f731f72ed
Merge pull request #239 from fireeye/backport-py3-fixes
...
backport py3 testing enhancements
2020-08-18 12:09:22 -06:00
Willi Ballenthin
385c956184
fixtures: fix doc
2020-08-17 20:53:34 -06:00
Willi Ballenthin
d8f2b7b4df
Merge pull request #236 from fireeye/fix-225
...
fix 225: declarative tests
2020-08-17 10:06:22 -06:00
Willi Ballenthin
b49ed276a9
Merge pull request #238 from Ana06/zip-binaries
...
Fix build workflow & zip binaries
2020-08-17 07:47:08 -06:00
Ana María Martínez Gómez
a2da55fb6f
Add version number to zip in build workflow
...
Relay in `github.ref` (the release tag).
2020-08-17 11:59:04 +02:00
William Ballenthin
d3dad3a66a
rules: fix bug in string counting
...
closes #241
2020-08-16 21:38:13 -06:00
William Ballenthin
b084f7cb9b
pep8
2020-08-16 05:18:39 -06:00
