pedump 0.4.14 → 0.4.15
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- data/Gemfile +1 -1
 - data/Gemfile.lock +0 -2
 - data/Rakefile +6 -5
 - data/VERSION +1 -1
 - data/data/fs.txt +37 -1408
 - data/data/jc-userdb.txt +14371 -0
 - data/data/sig.bin +0 -0
 - data/lib/pedump/sig_parser.rb +89 -11
 - data/lib/pedump/version.rb +1 -1
 - data/pedump.gemspec +3 -5
 - data/spec/sig_spec.rb +6 -1
 - metadata +33 -48
 
    
        data/Gemfile
    CHANGED
    
    
    
        data/Gemfile.lock
    CHANGED
    
    | 
         @@ -10,7 +10,6 @@ GEM 
     | 
|
| 
       10 
10 
     | 
    
         
             
                  rake
         
     | 
| 
       11 
11 
     | 
    
         
             
                  rdoc
         
     | 
| 
       12 
12 
     | 
    
         
             
                json (1.7.5)
         
     | 
| 
       13 
     | 
    
         
            -
                looksee (1.0.3)
         
     | 
| 
       14 
13 
     | 
    
         
             
                multipart-post (1.1.5)
         
     | 
| 
       15 
14 
     | 
    
         
             
                progressbar (0.12.0)
         
     | 
| 
       16 
15 
     | 
    
         
             
                rake (10.0.2)
         
     | 
| 
         @@ -33,7 +32,6 @@ DEPENDENCIES 
     | 
|
| 
       33 
32 
     | 
    
         
             
              awesome_print
         
     | 
| 
       34 
33 
     | 
    
         
             
              bundler
         
     | 
| 
       35 
34 
     | 
    
         
             
              jeweler
         
     | 
| 
       36 
     | 
    
         
            -
              looksee
         
     | 
| 
       37 
35 
     | 
    
         
             
              multipart-post (~> 1.1.4)
         
     | 
| 
       38 
36 
     | 
    
         
             
              progressbar
         
     | 
| 
       39 
37 
     | 
    
         
             
              rspec
         
     | 
    
        data/Rakefile
    CHANGED
    
    | 
         @@ -113,13 +113,13 @@ namespace :test do 
     | 
|
| 
       113 
113 
     | 
    
         
             
              end
         
     | 
| 
       114 
114 
     | 
    
         
             
            end
         
     | 
| 
       115 
115 
     | 
    
         | 
| 
       116 
     | 
    
         
            -
            def check_file url
         
     | 
| 
      
 116 
     | 
    
         
            +
            def check_file url, prefix=nil
         
     | 
| 
       117 
117 
     | 
    
         
             
              require 'digest/md5'
         
     | 
| 
       118 
118 
     | 
    
         
             
              require 'open-uri'
         
     | 
| 
       119 
119 
     | 
    
         | 
| 
       120 
120 
     | 
    
         
             
              STDOUT.sync = true
         
     | 
| 
       121 
     | 
    
         
            -
              fname = File.join 'data', File.basename(url)
         
     | 
| 
       122 
     | 
    
         
            -
              existing_md5 = Digest::MD5.file(fname).hexdigest
         
     | 
| 
      
 121 
     | 
    
         
            +
              fname = File.join 'data', (prefix ? "#{prefix}-" : '') + File.basename(url)
         
     | 
| 
      
 122 
     | 
    
         
            +
              existing_md5 = File.exist?(fname) ? Digest::MD5.file(fname).hexdigest : ''
         
     | 
| 
       123 
123 
     | 
    
         
             
              print "[.] fetching #{url} .. "
         
     | 
| 
       124 
124 
     | 
    
         
             
              remote_data  = open(url).read.force_encoding('cp1252').encode('utf-8')
         
     | 
| 
       125 
125 
     | 
    
         
             
              puts "#{remote_data.size} bytes"
         
     | 
| 
         @@ -128,18 +128,19 @@ def check_file url 
     | 
|
| 
       128 
128 
     | 
    
         
             
              if remote_md5 == existing_md5
         
     | 
| 
       129 
129 
     | 
    
         
             
                puts "[.] same as local"
         
     | 
| 
       130 
130 
     | 
    
         
             
              else
         
     | 
| 
       131 
     | 
    
         
            -
                existing_size = File.size(fname)
         
     | 
| 
      
 131 
     | 
    
         
            +
                existing_size = File.exist?(fname) ? File.size(fname) : 0
         
     | 
| 
       132 
132 
     | 
    
         
             
                File.open(fname,"wb"){ |f| f << remote_data }
         
     | 
| 
       133 
133 
     | 
    
         
             
                puts "[*] updated: #{existing_size} -> #{remote_data.size}"
         
     | 
| 
       134 
134 
     | 
    
         
             
              end
         
     | 
| 
       135 
135 
     | 
    
         
             
            end
         
     | 
| 
       136 
136 
     | 
    
         | 
| 
       137 
137 
     | 
    
         
             
            namespace :sigs do
         
     | 
| 
       138 
     | 
    
         
            -
              desc "update packers db from  
     | 
| 
      
 138 
     | 
    
         
            +
              desc "update packers db from net"
         
     | 
| 
       139 
139 
     | 
    
         
             
              task :update do
         
     | 
| 
       140 
140 
     | 
    
         
             
                require './lib/pedump/packer'
         
     | 
| 
       141 
141 
     | 
    
         
             
                check_file "http://research.pandasecurity.com/blogs/images/userdb.txt"
         
     | 
| 
       142 
142 
     | 
    
         
             
                check_file "http://fuu.googlecode.com/svn/trunk/src/x86/Tools/Signaturesdb/signatures.txt"
         
     | 
| 
      
 143 
     | 
    
         
            +
                check_file "http://handlers.sans.edu/jclausing/userdb.txt", "jc"
         
     | 
| 
       143 
144 
     | 
    
         
             
              end
         
     | 
| 
       144 
145 
     | 
    
         | 
| 
       145 
146 
     | 
    
         
             
              desc "convert txt2bin"
         
     | 
    
        data/VERSION
    CHANGED
    
    | 
         @@ -1 +1 @@ 
     | 
|
| 
       1 
     | 
    
         
            -
            0.4. 
     | 
| 
      
 1 
     | 
    
         
            +
            0.4.15
         
     |