Ofrak

Latest version: v3.2.0.post0

Safety actively analyzes 622435 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 2

3.2.0

Added
- Add a JFFS2 packer and unpacker. ([326](https://github.com/redballoonsecurity/ofrak/pull/326))
- Add method to Resource and data service to search for patterns in its data ([333](https://github.com/redballoonsecurity/ofrak/pull/333))
- Add search bars to GUI in order to search for a string or bytes within a resource. ([345](https://github.com/redballoonsecurity/ofrak/pull/345))
- Add Identifier, Unpacker, Packer for Intel Hex format. ([349](https://github.com/redballoonsecurity/ofrak/pull/349))
- Add unpackers for EXT filesystems (versions 2 through 4). ([337](https://github.com/redballoonsecurity/ofrak/pull/337))
- A new feature that allows users to create an OFRAK "project" that contains a collection of scripts and binaries. ([360](https://github.com/redballoonsecurity/ofrak/pull/360))

Changed
- Support uploading files in chunks to handle files larger than 2GB from the GUI ([324](https://github.com/redballoonsecurity/ofrak/pull/324))

Fixed
- Save resources affected by data patches and dependency updates on a resource being saved ([355](https://github.com/redballoonsecurity/ofrak/pull/355))


ofrak-patch-maker-v4.0.2
Fixed
- Remove option to read or install toolchain.conf from/to "/etc/toolchain.conf" ([342](https://github.com/redballoonsecurity/ofrak/pull/342))


ofrak-patch-maker-v4.0.1
Added
- Interface to iterate over all Toolchain implementations ([287](https://github.com/redballoonsecurity/ofrak/pull/287))

Fixed
- Localize magic import ([299](https://github.com/redballoonsecurity/ofrak/pull/299))

3.1.0

Added
- Add `ElfLoadAlignmentModifier`, which reclaims unused alignment bytes between PT_LOAD segments in ELFs as free space. ([302](https://github.com/redballoonsecurity/ofrak/pull/302))
- Add a "copy to clipboard" button to the "Show Snippet" view for easy exporting. ([301](https://github.com/redballoonsecurity/ofrak/pull/301))
- Add a settings pane to the OFRAK GUI that supports theming and changing colors ([309](https://github.com/redballoonsecurity/ofrak/pull/309))
- Add a button and interface in the OFRAK GUI to specifically select any component to run on a resource ([287](https://github.com/redballoonsecurity/ofrak/pull/287))
- Add DDR pad support to the OFRAK GUI ([322](https://github.com/redballoonsecurity/ofrak/pull/322))

Fixed
- Fixed a bug where clicking "Unpack" or "Identify" (for example) too quickly after loading a large resource causes an error that freezes up the whole GUI ([297](https://github.com/redballoonsecurity/ofrak/pull/297))
- Bump `importlib-metadata` version to fix import errors ([296](https://github.com/redballoonsecurity/ofrak/pull/296))
- Treat `libmagic`, `strings` as `ComponentExternalTools` so that they are considered dependencies. ([299](https://github.com/redballoonsecurity/ofrak/pull/299/))


ofrak-type-v2.2.0
[2.2.0](https://github.com/redballoonsecurity/ofrak/compare/ofrak-type-v2.1.0...ofrak-type-v2.2.0)

Added
- `ProcessorType.CORTEX_A72`
- LinkableSymbolType enum for generalized representation of symbol types (essentially functions vs. data)


ofrak-patch-maker-v4.0.0
[4.0.0](https://github.com/redballoonsecurity/ofrak/compare/ofrak-patch-maker-v.3.0.0...ofrak-patch-maker-v.4.0.0)

Changed
- Discard `.altinstructions` section when linking
- Use `SUBALIGN(0)` for `.bss` sections
- Force literal pool at end of function for AARCH64 using `-mpc-relative-literal-loads`

Added
- `-fno-optimize-sibling-calls` flag added to AVR toolchain.
- `-fno-pic` flag added to the GNU_10_Toolchain to omit GOTs in patches (FEMs) against binaries that aren't dynamically linked. (see [245](https://github.com/redballoonsecurity/ofrak/pull/245))
- Add methods to parse relocation symbols from object files.
- Extend parsed symbol dictionary to include LinkableSymbolType.
- Extend AssembledObject and BOM types to include relocation and unresolved symbols.
- Add separate data sections support to LLVM toolchain, and add general flag for including subsections

Changed
- Switch to standard GCC-like frontend for LLVM, which supports C attribute(weak)
- Treat weak symbols as "undefined" in BOM, so alternative, strong definitions can be searched
- Pass `-mmcu` value to the AVR preprocessor.
- Raise a more descriptive error on toolchain failure.

Fixed
- Toolchain `preprocess()` method now returns the path to the preprocessed file.

3.0.0

[3.0.0](https://github.com/redballoonsecurity/ofrak/compare/ofrak-v2.2.1...ofrak-v3.0.0)

Added
- Add call to flush a resource to disk in the script whenever a user downloads a resource from the GUI. ([277](https://github.com/redballoonsecurity/ofrak/pull/277))
- Generate dynamic, runnable script based on GUI actions and display the script in the GUI. ([265](https://github.com/redballoonsecurity/ofrak/pull/265))
- Add `-f`/`--file` option to `ofrak gui` command to pre-load some files into OFRAK before opening the GUI, so they can be explored right away ([266](https://github.com/redballoonsecurity/ofrak/pull/266))
- Add `-i`/`--import` option to the CLI to import and discover additional OFRAK Python packages when starting OFRAK. ([269](https://github.com/redballoonsecurity/ofrak/pull/269))
- Add Identifier to tag `ComplexBlocks` as `LinkableSymbols` and Analyzer to copy attributes from a `ComplexBlock` to its `LinkableSymbol`. ([226](https://github.com/redballoonsecurity/ofrak/pull/226))
- Add method to create new `LinkableSymbols` from symbols defined in a patch file. ([226](https://github.com/redballoonsecurity/ofrak/pull/226))


Changed
- Remove need to create Resources to pass source code and headers to `PatchFromSourceModifier` and `FunctionReplaceModifier` ([249](https://github.com/redballoonsecurity/ofrak/pull/249))
- Choose Analyzer components which output the entirety of a view, rather than piece by piece, which would choose the wrong Analyzer sometimes. ([264](https://github.com/redballoonsecurity/ofrak/pull/264))
- Generate LinkableBinary stubs as strong symbols, so linker use them to override weak symbols in patch ([259](https://github.com/redballoonsecurity/ofrak/pull/259))
- Limit stub file creation for linkable BOMs to only those required by a patch. ([226](https://github.com/redballoonsecurity/ofrak/pull/226))

Fixed
- Fix bug where `ComponentExternalTool` would raise an error when checking whether a tool was installed returned a non-zero exit value ([289](https://github.com/redballoonsecurity/ofrak/pull/289))
- Fix bug where jumping to a multiple of `0x10` in the GUI went to the previous line ([254](https://github.com/redballoonsecurity/ofrak/pull/254))
- Fix installing on Windows, as well as small GUI style fixes for Windows ([261](https://github.com/redballoonsecurity/ofrak/pull/261))
- Fixed `Uf2File` identifier so that it correctly tags UF2 files with `Uf2File` ([283](https://github.com/redballoonsecurity/ofrak/pull/283))

2.2.1

Added
- Add GUI features
- Keyboard shortcuts ([210](https://github.com/redballoonsecurity/ofrak/pull/210))
- Button to add a tag to a resource ([215](https://github.com/redballoonsecurity/ofrak/pull/215))
- Browser tab title contains current resource caption ([230](https://github.com/redballoonsecurity/ofrak/pull/230))
- Add a way to sort and filter by data length or offset ([220](https://github.com/redballoonsecurity/ofrak/pull/220))
- Add caption to ElfProgramHeader ([223](https://github.com/redballoonsecurity/ofrak/pull/223))
- Add baseline support for running pip-installing ofrak on Windows ([228](https://github.com/redballoonsecurity/ofrak/pull/228), [#239](https://github.com/redballoonsecurity/ofrak/pull/239), [#242](https://github.com/redballoonsecurity/ofrak/pull/242), [#246]( 246))

Changed
- Updates to Flash components: ([195](https://github.com/redballoonsecurity/ofrak/pull/195))
- Flash components now support more than one occurrence of the same field type in `FlashAttributes`.
- `FlashOobResourceUnpacker` continues to unpack even if blocks do not perfectly align at end of the `FlashOobResource` (this is useful for real-world flash dumps).
- Tweak how errors are raised when auto-running components, so the actual root cause is not buried ([219](https://github.com/redballoonsecurity/ofrak/pull/219))
- Show mapped resource captions on hover in the hex view ([221](https://github.com/redballoonsecurity/ofrak/pull/221))
- Change how resources are stored to making deleting (and thus packing) much faster ([201](https://github.com/redballoonsecurity/ofrak/pull/201))
- Use non-blocking `asyncio.create_subprocess_exec` calls in components ([53](https://github.com/redballoonsecurity/ofrak/issues/53))

Fixed
- Fix bug where initially loaded GUI resource has collapsed children ([209](https://github.com/redballoonsecurity/ofrak/pull/209))
- Fix bug in GUI where "jump to offset" feature in hex view rounded up instead of down ([243](https://github.com/redballoonsecurity/ofrak/pull/243))
- Support more OpenWRT TRX files by making fewer assumptions about the partitions ([216](https://github.com/redballoonsecurity/ofrak/pull/216))
- Fix some OS-specific problems (libmagic install, log file path) preventing OFRAK install on Windows ([239](https://github.com/redballoonsecurity/ofrak/pull/239))

2.2.0

Fixed
- Fix bug in data service that can cause mangled internal state [197](https://github.com/redballoonsecurity/ofrak/pull/197)
- Fix long-broken `OFRAK.set_id_service` [198](https://github.com/redballoonsecurity/ofrak/pull/198)
- Fix bug in `SegmentInjectorModifier` that resulted in deleting more resources than necessary [200](https://github.com/redballoonsecurity/ofrak/pull/200)

Added
- Replace unofficial p7zip with official 7zip package
- File browser dialog in the GUI
- Area in the GUI to jump to a given data offset
- GUI command line now has a flag to not automatically open the browser

Changed
- GUI is much faster, especially for resources with hundreds of thousands of children [191](https://github.com/redballoonsecurity/ofrak/pull/191)
- Resources whose data gets modified are now listed in the `resource_modified` field of component results [200](https://github.com/redballoonsecurity/ofrak/pull/200)

2.1.1

Fixed
- GUI uses correct attribute class names again (not *AutoAttributes)

Page 1 of 2

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.