{"id":26010137,"url":"https://github.com/jblukach/mmi","last_synced_at":"2026-02-15T16:10:03.565Z","repository":{"id":60835558,"uuid":"545963069","full_name":"jblukach/mmi","owner":"jblukach","description":"OS Triage for Anyone and Everyone","archived":false,"fork":false,"pushed_at":"2026-02-11T03:01:22.000Z","size":1811,"stargazers_count":9,"open_issues_count":0,"forks_count":1,"subscribers_count":1,"default_branch":"main","last_synced_at":"2026-02-11T05:58:29.512Z","etag":null,"topics":["amazon","apple","arm","aws","b3","blake3","cli","hash","linux","macintosh","macos","microsoft","rust","triage","ubuntu","windows","x86"],"latest_commit_sha":null,"homepage":"https://crates.io/crates/mmi","language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jblukach.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null},"funding":{"github":["jblukach"]}},"created_at":"2022-10-05T09:27:57.000Z","updated_at":"2026-02-11T03:01:25.000Z","dependencies_parsed_at":"2024-04-13T12:33:15.489Z","dependency_job_id":"2a534a8e-d2e9-4d8d-8d5e-7cb662ac056a","html_url":"https://github.com/jblukach/mmi","commit_stats":{"total_commits":68,"total_committers":5,"mean_commits":13.6,"dds":"0.36764705882352944","last_synced_commit":"cf888a123f1414e55d7fe00d9c273211c74c276f"},"previous_names":[],"tags_count":7,"template":false,"template_full_name":null,"purl":"pkg:github/jblukach/mmi","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jblukach%2Fmmi","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jblukach%2Fmmi/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jblukach%2Fmmi/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jblukach%2Fmmi/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jblukach","download_url":"https://codeload.github.com/jblukach/mmi/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jblukach%2Fmmi/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29483645,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-15T15:33:17.885Z","status":"ssl_error","status_checked_at":"2026-02-15T15:32:53.698Z","response_time":118,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["amazon","apple","arm","aws","b3","blake3","cli","hash","linux","macintosh","macos","microsoft","rust","triage","ubuntu","windows","x86"],"created_at":"2025-03-05T22:39:37.293Z","updated_at":"2026-02-15T16:10:03.560Z","avatar_url":"https://github.com/jblukach.png","language":"Rust","funding_links":["https://github.com/sponsors/jblukach"],"categories":[],"sub_categories":[],"readme":"# mmi\n\nMetadata is the lowest-value indicator as easy to circumvent. Still, with the exponential volume of directories and files standard on default operating system installations, finding things hiding in plain sight has become an important analysis technique.\n\n```\nmmi\n```\n\nOutput:\n\n![Match Meta Inforamtion (MMI) Output](cli.png)\n\nLegitimate files found on default OS installations that threat actors can potentially use to perform malicious intent are flagged; this technique is known as living off the land (LOL).\n\n- https://gtfobins.github.io\n\n### Visualizations\n\n- **BLUE** Known Meta Text\n- **GREEN** Known File Content\n- **MAGENTA** Full Path NOT Matched\n- **RED** Potentially Suspect\n\n### Classifications\n\n- **DENIED** Permission Issue\n- **DIRECTORY** Folder Path\n- **EMPTY** Empty File Hash\n- **ERROR** Content Hash Error\n- **LARGE** File Size 1+ GB\n- **ZERO** Zero File Size\n\n### Help Command\n\n```\nmmi help\n```\n\nOutput:\n\n```\nCommands: download, status, verify\n```\n\n### Required Files\n\n```\nmmi\n```\n\nOutput:\n\n```\nRequired File: /workspaces/mmi/target/debug/lol.poppy\nRequired File: /workspaces/mmi/target/debug/mmi.poppy\nDownload Link: https://github.com/jblukach/artifacts/releases\n```\n\n### Download Command\n\n```\nmmi download\n```\n\nOutput:\n\n```\nDownload Link: https://github.com/jblukach/artifacts/releases/download/v2025.02.02/lol.poppy\nFile Download: /workspaces/mmi/target/debug/lol.poppy\nDownload Link: https://github.com/jblukach/artifacts/releases/download/v2025.02.02/mmi.poppy\nFile Download: /workspaces/mmi/target/debug/mmi.poppy\nDownload Link: https://github.com/jblukach/artifacts/releases/download/v2025.02.02/verification.csv\nFile Download: /workspaces/mmi/target/debug/verification.csv\n```\n\n### Status Command\n\n```\nmmi status\n```\n\nOutput:\n\n```\nEstimate: 22116 /workspaces/mmi/target/debug/lol.poppy\nEstimate: 4071377 /workspaces/mmi/target/debug/mmi.poppy\n```\n\n### Verify Command\n\n```\nmmi verify\n```\n\nOutput:\n\n```\nVerified: /workspaces/mmi/target/debug/mmi.poppy\nVerified: /workspaces/mmi/target/debug/lol.poppy\n```\n\n### Dependency\n\n```\ncurl https://sh.rustup.rs -sSf | sh -s -- -y\nsource \"$HOME/.cargo/env\"\n```\n\n### Installation\n\n```\ncargo install mmi\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjblukach%2Fmmi","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjblukach%2Fmmi","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjblukach%2Fmmi/lists"}