Reverse engineered 90 builder tools – generated variant-specific YARA rules

3 GokbakarE 0 7/28/2025, 11:01:57 AM

I emulated 94 legacy builder apps in QEMU, generated their binaries, and wrote ultra-precise YARA rules for each. This isn't about coverage — it's about exact variant matching. All rules, metadata, and structure are open-sourced. Link in the repo: github.com/GokbakarE/RuleSetRAT

Trump is off to a good start with an AI action plan (washingtonpost.com)

Visa and Mastercard are getting overwhelmed by gamer fury over censorship (polygon.com)

Show HN: I built a free tool to clean up and export your Kindle highlights (clipvault.xyz)

Show HN: Allzonefiles.io – get lists of all registered domains in the Internet (allzonefiles.io)

Sony sues Tencent for allegedly ripping off 'Horizon' video games (reuters.com)

Distribution of Household Wealth in the U.S. since 1989 (federalreserve.gov)

The Terminator Delusion (ryanglover.net)

Bcachefs to Remove Experimental Label in Linux 6.18 – If It's Still in Kernel (phoronix.com)

How Spain's Blackout Sparked New Political Currents Online (blogs.lse.ac.uk)

Eslogger: Trace filesystem events using the Mac OS X endpoint security framework (notes.billmill.org)

Review: The Astral Codex Ten Commentariat ("Why Do We Suck?") (astralcodexten.com)

The Country Where 76% of Cars Sold Are Electric (nytimes.com)

DHCP Starvation

The New Chips Designed to Solve AI's Energy Problem (wsj.com)

Sublime Merge Build 2110 (sublimemerge.com)

Delta Pilot Is Arrested in Cockpit After Flight Lands in San Francisco (nytimes.com)

Parker Solar Probe Captures Closest-Ever Images of the Sun (sciencefriday.com)

Ask HN: Have you ever waited for a project to be launched but it never did?

Perl 5.42 Released – Still Going Strong (i-programmer.info)

Show HN: Discord Server Directory (discordserver.directory)

An Engineer's Guide to AI Code Model Evals (addyosmani.com)

VC Job Sources

Show HN: I built Nexty.dev – 90 days since launch, 70 paid customers (nexty.dev)

Ultra Instinct (evjang.com)

A Quick Tour of Positron (posit.co)

Swiss influenza genome allows insights into host adaptation during the 1918 flu (bmcbiol.biomedcentral.com)

Copilot Mode in Edge: A new way to browse the web (blogs.windows.com)

Microsoft is launching agentic mode in Edge Browser (reuters.com)

The Bull Market for Economists Is Over. It's an Ominous Sign for the Economy (nytimes.com)

Ask HN: What is the worst development limbo you ever faced?

AI will soon be able to audit science – what will that mean for public trust? (theconversation.com)

Ars spoke with the military's chief orbital traffic cop–here's what we learned (arstechnica.com)

Murder not crisis – Why Israel's starvation of Gaza is exceptional (adamtooze.substack.com)

Cyberattack on Russian Airline Aeroflot (bostonherald.com)

Built on Coal, Powered by Sun: China's New Future (evcurvefuturist.com)

Confessions of the Working Poor (macleans.ca)

SploitLight: Microsoft warns macOS flaw could leak Apple Intelligence metadata (9to5mac.com)

Hackers Hit a Major US Insurance Firm Exposing Details of Nearly 1.4M Customers (hothardware.com)

Two-hour screen time limit for children being considered by government (UK) (news.sky.com)

My vercel bill jumped from $300 a month to $3550 this month (twitter.com)

Show HN: Preq – Community powered detection of hidden reliability problems (github.com)

Show HN: Edifest.fyi – browse the Edinburgh Fringe with embeddings and MCP chat (edifest.fyi)

Anonymously Bridging a Physical Book to the Web (blog.tendollaradventure.com)

Windows Directory Structure Synchronizer (github.com)

Voice-controlled AI Blender [video] (youtube.com)

The Rise of Vibeinsecurity (vibeinsecurity.com)

Color Me Same – a new kind of logic puzzle (color-me-same.franzai.com)

Jeopardy World (hauleth.dev)

Syco Bench, a simple benchmark of LLM Sycophancy (timfduffy.substack.com)

Doge builds AI tool to cut 50 percent of federal regulations (washingtonpost.com)

Reverse engineered 90 builder tools – generated variant-specific YARA rules

Comments (0)