Try Hack Me: YARA

[@stuffy24]

Get 20% OFF @manscaped + Free Shipping with promo code STUFFY24 at MANSCAPED.com! #ad #manscapedpod

[@jacobmurphy8579]

Thank you for the walkthrough! Going through the SOC 1 path right now and some of the linux commands were a pain in the butt.

[@stuffy24]

of course man we are all trying to get better just gotta work together sometimes!

[@rafaeldacosta8581]

27:23 is THM room teaching us to not trust Yara detection? since file2 is flagged as bening, 'thou it's just b374k webshell in later version

[@stuffy24]

Yara rules are as good as you make them.

[@frybait0626]

how we're you able to identify and cat out the specific rule inside the .yar file? there's alot of rules inside the thor-webshells.yar What is the specific command or grep that you did.

[@SecTechie]

Great walkthrough. Thanks so much.

[@stuffy24]

Thank you!

[@adalparedes1]

thank you for this video and your time, I really appreciate it. thank you again for sharing

[@alechernandez5506]

Thanks brother. Going to be taking CySA soon and applying for SOC positions in the next few months.

[@stuffy24]

Best of luck! You got this

[@treedents839]

i did the same process, my VM doesnt let me use the cp command to copy the file 2 in Loki, getting quiet pissed off at that haha

[@stuffy24]

@@treedents839 lol that's super frustrating

[@BartekFreestyle]

Thank you for this, I couldn't do it if I wasn't following and listening to the explanation. However I have encountered an issue with writing the Yara rule in Task 10. Despite copying the python3 yarGen.py -m /home/cmnatic/suspicious-files/file2 --excludegood -o /home/cmnatic/suspicious-files/file2.yar command. the response on the console was that it couldn't find file2. Not sure if only me had this issue

[@stuffy24]

Feel free to join the discord and throw the question in the questions chat

[@chbihmrabih9666]

Thank you, please keep going on it was very clear and helpfull

[@greenonblack2790]

great walkthrough thanks 🙏📈

[@MFmyk3]

cant get the copy cp command to work following your input. keeps saying cp" can not stat: No such file or directory" - trying everything im going crazy with this. stuck for 2 hours. checked both dir. all files an pathway exist. not sure what i am doing wrong, im copying the exact inputs.

[@stuffy24]

Hop in the discord and put screenshots plz

[@MFmyk3]

@@stuffy24 hoping in now thnks, didnt see ur comment update.

[@thatoneguywithtwothumbs]

Ok but why won’t it let me save it. 😅

[@thatoneguywithtwothumbs]

Nvm I have the tism

[@williamthomas3233]

I’m still having a hard time exiting and saving

[@thatoneguywithtwothumbs]

@@williamthomas3233 ctrl + x to exit. "y" to save. then enter.