Adding a New Section to the Rule with CAPI
Hello,
Is it possible to extend the CAPI SDK to allow adding custom sections to the rule, just like the existing sections, `strings`, `condition` and `meta`?
**The grammar and definition from the `meta` section are a great start for the custom section.** It doesn't have to be referencable from within the `condition` section. This is a cleaner way to define custom keywords that communicate information to the scanner/engine, rather than using the meta section for the same purpose.
Example:
```
rule new_section
{
meta:
ref = "https://www.example.com"
custom_section:
foo = "bar"
condition:
true
}
```
关闭于 2026-04-09 2 条评论