Skip to content

Releases: aaron11998/opensig

v0.1.0 — MVP signature corpus + applier

Choose a tag to compare

@aaron11998 aaron11998 released this 20 Oct 10:15

First public release of opensig: open, clean-room library signatures for stripped static ELF binaries, with a Ghidra headless applier.

Highlights

  • glibc 2.41 (Debian + source -O2/-O3) and musl 1.2.5 (gcc -O0/-O2/-O3, clang -O2) packs
  • Relocation-masked patterns + call-graph confidence scoring
  • opensig detect|match|apply|check CLI

Benchmark (Ghidra 12.1.4, stripped static gcc -O2 test binary)

Named before 38 / 1085
Named after 855 / 1109
Precision vs unstripped 97.3%
Precision at confidence ≥ 0.8 100% (688/688)

Assets

  • opensig-0.1.0-sigs.tar.gz — all packs under sigs/ (also present in the tag tree)

Clean-room

Signatures built only from open-source / distro archives. No IDA FLIRT, Lumina, Binary Ninja, or other proprietary signature data.

See the README for full tables and quickstart.