Sometimes I just need to search for a string in the files of a ZIP container, and for that I need to create a small YARA rule.
With this new version, I can let zipdump generate the rule, I just need to provide the string. The value provided to option -y needs to start with #s# (s stands for string). Here is an example where I search for string HUBBLE:
zipdump_v0_0_11.zip (https)
MD5: E97E0191757230D2C7F9109B91636BF7
SHA256: 6640F971F61F7915D89388D3072854C00C81C47476A96CAC7BE6740DA348467B
Article Link: https://blog.didierstevens.com/2017/07/19/updatezipdump-py-version-0-0-11/