From 020febac0858ffe33327695b0d46032726979703 Mon Sep 17 00:00:00 2001 From: pancake Date: Tue, 16 Apr 2024 12:11:29 +0200 Subject: [PATCH] Release 1.2.2 --- README.md | 29 +++++++++++++++++++++++++++++ configure | 10 +++++----- configure.acr | 2 +- 3 files changed, 35 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index 36a69dc..a12a0a6 100644 --- a/README.md +++ b/README.md @@ -15,4 +15,33 @@ After running this command: r2pm -ci r2yara ``` +## Documentation + +See `man 7 r2yara` for some examples. + You will get the `yr` command inside `radare2` shell + +``` +[0x00000000]> yr? +Usage: yr [action] [args..] load and run yara rules inside r2 +| yr [file] add yara rules from file +| yr-* unload all the rules +| yr? show this help (same as 'yara?') +| yr list loaded rules +| yrs[S] scan the current file, if S option is given it prints matching strings +| yrt list tags from the loaded rules +| yrt [tagname] list rules with given tag +| yrv show version information about r2yara and yara +[0x00000000]> q +``` + +Run it like this: + +``` +$ radare2 /bin/ls +> yr hello.yara # load this rule +> yrs # scan for all the loaded rules +HelloWorld +0x000045f9: yara0.HelloWorld_0 : 6c6962 +0x00004685: yara0.HelloWorld_1 : 6c6962 +``` diff --git a/configure b/configure index 96f0a0c..7ddc913 100755 --- a/configure +++ b/configure @@ -112,12 +112,12 @@ done : ${INSTALL_PROGRAM_STRIP:=${INSTALL} -m 755 -s} : ${INSTALL_MAN:=${INSTALL} -m 444} : ${INSTALL_LIB:=${INSTALL} -m 755 -c} - PKGNAME='r2yara' ; VERSION='1.2.0' ; VERSION_MAJOR=1; VERSION_MINOR=2; VERSION_PATCH=0; VERSION_NUMBER=10200; CONTACT_MAIL="judy.frankowski@gmail.com" ; CONTACT_NAME="jfrankowski" ; CONTACT="jfrankowski " ; + PKGNAME='r2yara' ; VERSION='1.2.2' ; VERSION_MAJOR=1; VERSION_MINOR=2; VERSION_PATCH=2; VERSION_NUMBER=10202; CONTACT_MAIL="judy.frankowski@gmail.com" ; CONTACT_NAME="jfrankowski" ; CONTACT="jfrankowski " ; } show_usage() { cat <." exit 0 @@ -226,7 +226,7 @@ case $flag in show_version ; ;; -r|--r|--report) echo "PKGNAME: r2yara" -echo "VERSION: 1.2.0" +echo "VERSION: 1.2.2" echo "AUTHOR: jfrankowski" echo "EMAIL: judy.frankowski@gmail.com" echo "DESCRIPTION: yara plugin for radare2" diff --git a/configure.acr b/configure.acr index 9511ec5..bca938f 100644 --- a/configure.acr +++ b/configure.acr @@ -1,5 +1,5 @@ PKGNAME r2yara -VERSION 1.2.0 +VERSION 1.2.2 DESCRIPTION yara plugin for radare2 ; CONTACT jfrankowski ; judy.frankowski@gmail.com