SCOUT v3.0.0-rc1 — Hybrid Analysis Engine

SCOUT v3.0.0-rc1 — Hybrid Analysis Engine

SCOUT v3.0.0-rc1 marks the transition from a binary-centric firmware scanner to a Hybrid Analysis Engine.

This release adds first-class shell script analysis to the existing firmware analysis pipeline, closing a major blind spot in firmware auditing where high-level script logic previously remained under-analyzed compared to ELF binaries.

Highlights

• Integrated ScriptAnalyzer into the main SCOUT pipeline
• Expanded analysis coverage from ELF binaries to shell scripts
• Added heuristic detection for insecure eval, backticks, and unquoted variable usage
• Updated inventory logic to recursively collect shell scripts
• Unified script findings with the existing report pipeline
• Preserved report usability by avoiding raw heuristic match bloat

Validation

Tested on TP-Link ER605 firmware.

• Processed 1,334 shell scripts
• Manually reviewed TOP 20 script findings
• Confirmed stable merge into unified report.json
• Verified high-impact findings including ipsec and acme.sh command-injection candidates

Design Constraint

SCOUT must process 1,000+ scripts without causing report bloat or analyst fatigue.

Rejected Design

Raw heuristic matches are not stored directly in the main dossier.

Reason:

• High false-positive noise
• Poor signal-to-noise ratio
• Increased report size
• Reduced analyst usability
• Unnecessary performance drag

Confidence

High.

Scope Risk

Broad.

This release changes SCOUT's analysis scope from binary-focused firmware analysis to hybrid binary/script firmware analysis.

Not Tested

• Highly obfuscated custom shell loaders
• Vendor-specific script packing schemes
• Large-scale regression across multiple firmware families

Versioning

• Git tag: v3.0.0-rc1
• Python package version: 3.0.0rc1