No proper Read me

[Abyss-W4tcher]

Hi, I found this awesome library while trying to decrypt a zeus config file. However, I had to make a grep on all the files to find where the main was.

Would it be possible to add a proper Read me, with the basic instructions to get started easily ?

Thanks !

[0xShaym]

In case anyone's wondering, here's some info on how to decrypt a zeus config file with this lib :

First, this lib is in python 2

Secondly,

python2 setup.py -h
python2 setup.py build
sudo python2 setup.py install

then

python2 libzpy/build/lib.linux-x86_64-2.7/libzpy/libs/cr_tools.py -h
usage: cr_tools.py [-h] [-f FILE] [-k KEY] [-d DATA] [-v] [-vv] [-t TYPE] [-6]

RC4 decoder

optional arguments:
 -h, --help show this help message and exit
 -f FILE, --file FILE
 -k KEY, --key KEY
 -d DATA, --data DATA
 -v, --visual
 -vv, --vvisual
 -t TYPE, --type TYPE Type of encryptionk key: bin/string/hex
 -6

Note :

• You must enter a key and its type, otherwise the script will not run.
• parameter -6 corresponds to RC6 instead of RC4

[mak]

wow i wouldn't expect anyone still using it ;]
if there is enough interest i can rewrite it into py3

[0xShaym]

I think it could be interesting, the lib helped me a lot.
And I think a lot of people could still use it x)

[tsukuyomi197]

Hello !
It would be great as well if you can rewrite it in python 3 in my opinion. Zeus virus are still being analyzed today for exercices for students