securisec / chepy_plugins Goto Github PK

Generate yara rules for the data in state

Discuss requirements!
Do we have a template rule?
Detect based on the state, as hex chars, string...?

The example plugin (below) does not get picked up when placed into the plugins directory.

Steps to reproduce:

1. Create a file named chepy_test_plugin in the plugin directory as noted in the chepy config in $HOME
2. Contents of the file as the example plugin
3. Use the following code to utilise the "test" plugin:

from chepy import Chepy
c = Chepy("hello").myplugin_method().to_hex().base64_encode()
print(c)

This throws the following error:
AttributeError: 'Chepy' object has no attribute 'myplugin_method'

Expected output:
Njg2NTZjNmM2ZjY4NjU2YzZjNmY2ODY1NmM2YzZmNjg2NTZjNmM2ZjY4NjU2YzZjNmY2ODY1NmM2YzZmNjg2NTZjNmM2ZjY4NjU2YzZjNmY2ODY1NmM2YzZmNjg2NTZjNmM2ZjY4NjU2YzZjNmY2ODY1NmM2YzZmNjg2NTZjNmM2ZjY4NjU2YzZjNmY2ODY1NmM2YzZmNjg2NTZjNmM2ZjY4NjU2YzZjNmY2ODY1NmM2YzZmNjg2NTZjNmM2ZjY4NjU2YzZjNmYK

Example plugin:

import chepy.core

class MyPlugin(chepy.core.ChepyCore):
    
    @chepy.core.ChepyDecorators.call_stack
    def myplugin_method(self):
        """another method
        
        Returns:
            Chepy: The chepy object
        """
        self.state = self.state * 20
        return self

NB, it also doesn't show in the autocomplete list in the interactive cli mode