flare-floss

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

APACHE-2.0 License

Downloads
1.7K
Stars
3.1K
Committers
30

Bot releases are hidden (Show)

flare-floss - BHEU Bald Eagle

Published by mr-tz almost 8 years ago

Major changes:

  • analyze shellcode from raw binary files
  • 32bit and 64bit standalone nightly builds for Windows
  • support for x64dbg database file
  • display vivisect analysis meta information
  • new plugin to identify decoding routines based on suspicious mov instructions
  • additional API hooks, improving emulation coverage
  • fewer false positive decoded strings
flare-floss - #DFIRSummit Dragon

Published by williballenthin over 8 years ago

major changes:

  • drastically improve performance, esp. for complex binaries
  • improve command line argument handling
  • enable static strings output, simplify default output mode
  • add r2 scripting support
  • fix bug extracting static strings from non-PE binaries
  • add additional API hooks, improving emulation coverage
  • filter out even more non-sensical strings
flare-floss - Computer Science Fair Fox

Published by williballenthin over 8 years ago

major changes:

  • add testing framework
  • add tests for known decoding routines
  • improve formatting of tables (headers, column spacing, etc.)
  • enable nightly builds
  • support osx standalone binaries
  • improved detection of decoding routines
  • fix emulation of some specific assembly instructions
  • add additional api hooks for memory allocation and manipulation
  • prepare for use in tool frameworks
flare-floss - AtlSecCon Atlas

Published by williballenthin over 8 years ago

Lots of new features, including:

  • static strings mode: for extracting cleartext strings like strings.exe.
  • quiet mode: for piping output to grep.
  • improved documentation everywhere (github & source code).
  • can use FLOSS as a Python library in other tools.
  • simplified code for long term maintenance.
flare-floss -

Published by williballenthin over 8 years ago

flare-floss -

Published by williballenthin over 8 years ago

flare-floss - Tarheel Torpedo

Published by williballenthin over 8 years ago

Initial release. Differs from release "Initial Release" only in version number (1.0.1) to ensure we got the GitHub versioning process down correctly.

flare-floss - Initial Release

Published by williballenthin over 8 years ago

Initial release.