ORRESS v1.2.0

The binary-exploitation release: enough that a student of a Linux pwn/RE course (such as
the nightmare course) can work end to end inside ORRESS.

Added

• Linux native debugging: the ptrace back end (breakpoints, stepping, registers,
  stack and memory) is now offered in the Debugger panel on Linux (x86-64) as well as
  Windows, and ELF executables are debuggable targets.
• Exploit-development toolkit (orress-pwn): tubes that talk to a local process or a
  remote TCP service (send/recvuntil/…), integer packing (p8–p64/u*), cyclic
  (de Bruijn) patterns and offset recovery, a ROP gadget finder, and payload builders —
  format-string writes (fmtstr), sigreturn frames (SROP), execve("/bin/sh") shellcode,
  one_gadget, ret2csu and ret2dlresolve.
• Exploit console: a pwntools-style scripting tab (Rhai) exposing all of the above
  plus symbol/GOT/PLT lookups and gadget search, run on a worker thread with live output.
• Gadgets panel: list and filter the binary's ROP gadgets and copy their addresses.
• glibc heap visualizer (orress-heap + Heap panel): while a Linux program is stopped,
  show the malloc chunks, the tcache, and (with main_arena, auto-located from the unsorted
  bin) the fastbins and unsorted/small/large bins.
• CLI: exploit (run a pwn script headless), gadgets, and one-gadget subcommands.

Downloads

Platform	Archive
Windows (x86-64)	orress-*-x86_64-pc-windows-msvc.zip
Linux (x86-64)	orress-*-x86_64-unknown-linux-gnu.tar.gz
Linux (ARM64)	orress-*-aarch64-unknown-linux-gnu.tar.gz
macOS (Apple Silicon)	orress-*-aarch64-apple-darwin.tar.gz
macOS (Intel)	orress-*-x86_64-apple-darwin.tar.gz

Each archive has a .sha256 checksum. Linux needs libxkbcommon, GTK 3 and Wayland or X11
(present on desktop distributions). The macOS builds are not notarized yet: after unpacking,
run xattr -dr com.apple.quarantine orress-* once, or right-click orress → Open. macOS
support is new — please report problems.

ORRESS v1.0.0

The first public release of ORRESS — the Okiedocus Rusty Reverse Engineering Software Suite.

Highlights

• Prebuilt for Windows (x86-64), Linux (x86-64, ARM64) and macOS (Apple Silicon, Intel).
• A pure-Rust reverse-engineering IDE with a Zed-inspired workspace: docks, panes, splits, a
  command palette, and Zed-format keymaps and themes.
• Loaders and formats: PE, ELF and Mach-O, plus .NET, Java class/JAR, Android DEX, Python
  .pyc, WebAssembly, JavaScript, and ZIP-based containers (ZIP64, JAR, APK).
• Disassembly and analysis for x86/x86-64 and ARM64: functions, control-flow graphs, cross
  references, strings, renaming, comments and bookmarks.
• A decompiler that speaks Rust, including a Rust port mode that turns assembly into
  compilable Rust.
• Run, debug and solve: a native debugger (Windows; Linux experimental), an x86-64 emulator
  with time-travel tracing, a symbolic solver, devirtualization, and binary diffing.
• Malware analysis: triage with imphash, fuzzy hashes and IOCs, YARA-X scanning, and a sandbox
  that requires a VM, contains the whole process tree and offers a fake network.
• Built-in tools: an in-app assembler and patcher, a CyberChef-style transform workbench, a
  code editor with language-server support, a debug-adapter client and an integrated terminal.
• Extensible: runs Zed extensions (themes, grammars, language servers, WASM) and Rhai scripts.
• Learn inside the tool: the ORRESS Academy — 8 levels, 37 lessons, practice crackmes and a
  CPU simulator.
• AI, your way: an assistant on your Claude plan (via the claude CLI), the Claude API, any
  OpenAI-compatible or local model, or fully offline; plus an MCP server (orress-mcp) that exposes
  ORRESS's engines to AI agents.
• Team play: end-to-end-encrypted real-time collaboration through a small relay
  (orress-relay), with CTFd and rCTF integration.

Fixed (since the pre-release builds)

• Mach-O executables now report their real entry point: LC_MAIN stores a file offset, which
  is now translated to a virtual address (previously "go to entry" and analysis seeding were off
  on every macOS binary).
• Linux position-independent executables are classified as executables, not libraries.
• Mach-O imports are resolved to their stubs and GOT slots (from the indirect symbol table), so
  calls into system libraries are named in macOS binaries.

Security

• Extensions run in the wasmtime 36 long-term-support series with path confinement, a filtered
  environment and an execution policy; YARA-X is held on a release built on the same patched
  series.
• Dependencies are checked by cargo deny (RustSec advisories, licenses, sources) on every push
  and daily.

Downloads

Platform	Archive
Windows (x86-64)	orress-*-x86_64-pc-windows-msvc.zip
Linux (x86-64)	orress-*-x86_64-unknown-linux-gnu.tar.gz
Linux (ARM64)	orress-*-aarch64-unknown-linux-gnu.tar.gz
macOS (Apple Silicon)	orress-*-aarch64-apple-darwin.tar.gz
macOS (Intel)	orress-*-x86_64-apple-darwin.tar.gz

Each archive has a .sha256 checksum. Linux needs libxkbcommon, GTK 3 and Wayland or X11
(present on desktop distributions). The macOS builds are not notarized yet: after unpacking,
run xattr -dr com.apple.quarantine orress-* once, or right-click orress → Open. macOS
support is new — please report problems.