Flare-floss

Latest version: v3.1.1

Safety actively analyzes 688178 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 3 of 4

1.6.1

fixes the version embedded within the binary

1.6.0

fixes:
- logging levels
- some api function hooks
- code style


adds:
- additional scripts for ida and binja
- cli option to configure max emulation instruction count
- option to emit json file with results

contributors:
- capnspacehook
- BenjaminSoelberg
- fevral
- Ana06
- b0urb0n

Thanks, all!


[changes](https://github.com/fireeye/flare-floss/compare/v1.5.0...v1.6.0)

1.5.0

Major changes:
- filtering of false positive deobfuscated strings
- new `--no-filter` option to disable filtering
- improved heuristics to find stackstrings
- enhanced stackstrings extraction
- additional API hooks, improving emulation coverage

Please be aware that some of the APIs, e.g. `decode_strings` and `extract_stackstrings`, changed.

1.4.0

Major changes:
- analyze shellcode from raw binary files
- 32bit and 64bit standalone nightly builds for Windows
- support for x64dbg database file
- display vivisect analysis meta information
- new plugin to identify decoding routines based on suspicious mov instructions
- additional API hooks, improving emulation coverage
- fewer false positive decoded strings

1.3.0

major changes:
- drastically improve performance, esp. for complex binaries
- improve command line argument handling
- enable static strings output, simplify default output mode
- add r2 scripting support
- fix bug extracting static strings from non-PE binaries
- add additional API hooks, improving emulation coverage
- filter out even more non-sensical strings

1.2.0

major changes:
- add testing framework
- add tests for known decoding routines
- improve formatting of tables (headers, column spacing, etc.)
- enable nightly builds
- support osx standalone binaries
- improved detection of decoding routines
- fix emulation of some specific assembly instructions
- add additional api hooks for memory allocation and manipulation
- prepare for use in tool frameworks

Page 3 of 4

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.