From a62b7e245285f3f21b36b2ee3668c8c0f28739e3 Mon Sep 17 00:00:00 2001 From: amialav Date: Wed, 26 Mar 2025 02:20:20 +0300 Subject: [PATCH] Update Base64_Encoded_URL.yar --- Base64_Encoded_URL.yar | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Base64_Encoded_URL.yar b/Base64_Encoded_URL.yar index 7f8a5b3..dac8415 100644 --- a/Base64_Encoded_URL.yar +++ b/Base64_Encoded_URL.yar @@ -17,4 +17,4 @@ rule Base64_Encoded_URL $httpsw = /(aAB\x30AHQAcABzADoALwAv[\x2b\x2f-\x39A-Za-z]|[\x2b\x2f-\x39A-Za-z][\x2b\x2f-\x39A-Za-z][\x31\x35\x39BFJNRVZdhlptx]oAHQAdABwAHMAOgAvAC[\x2b\x2f\x38-\x39]|[\x2b\x2f-\x39A-Za-z][\x32GWm]gAdAB\x30AHAAcwA\x36AC\x38AL[\x2b\x2f-\x39w-z])/ condition: any of them and not (uint16be(0x0) == 0x4d5a) -} \ No newline at end of file +}