Skip to content

Releases: mandiant/flare-floss

BHEU Bald Eagle

03 Nov 15:32
Compare
Choose a tag to compare

Major changes:

  • analyze shellcode from raw binary files
  • 32bit and 64bit standalone nightly builds for Windows
  • support for x64dbg database file
  • display vivisect analysis meta information
  • new plugin to identify decoding routines based on suspicious mov instructions
  • additional API hooks, improving emulation coverage
  • fewer false positive decoded strings

#DFIRSummit Dragon

23 Jun 14:54
Compare
Choose a tag to compare

major changes:

  • drastically improve performance, esp. for complex binaries
  • improve command line argument handling
  • enable static strings output, simplify default output mode
  • add r2 scripting support
  • fix bug extracting static strings from non-PE binaries
  • add additional API hooks, improving emulation coverage
  • filter out even more non-sensical strings

Computer Science Fair Fox

13 May 20:14
Compare
Choose a tag to compare

major changes:

  • add testing framework
  • add tests for known decoding routines
  • improve formatting of tables (headers, column spacing, etc.)
  • enable nightly builds
  • support osx standalone binaries
  • improved detection of decoding routines
  • fix emulation of some specific assembly instructions
  • add additional api hooks for memory allocation and manipulation
  • prepare for use in tool frameworks

AtlSecCon Atlas

10 Apr 15:57
Compare
Choose a tag to compare

Lots of new features, including:

  • static strings mode: for extracting cleartext strings like strings.exe.
  • quiet mode: for piping output to grep.
  • improved documentation everywhere (github & source code).
  • can use FLOSS as a Python library in other tools.
  • simplified code for long term maintenance.

v1.0.3

10 Mar 02:44
Compare
Choose a tag to compare
setup: bump to 1.0.3

v1.0.2

10 Mar 02:34
Compare
Choose a tag to compare
setup.py: bump to 1.0.2

Tarheel Torpedo

04 Mar 22:48
Compare
Choose a tag to compare

Initial release. Differs from release "Initial Release" only in version number (1.0.1) to ensure we got the GitHub versioning process down correctly.

Initial Release

04 Mar 22:24
Compare
Choose a tag to compare

Initial release.