Skip to content

ORRESS v1.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Oct 19:25
· 54 commits to main since this release
v1.0.0
a7773b7

The first public release of ORRESS — the Okiedocus Rusty Reverse Engineering Software Suite.

Highlights

  • Prebuilt for Windows (x86-64), Linux (x86-64, ARM64) and macOS (Apple Silicon, Intel).
  • A pure-Rust reverse-engineering IDE with a Zed-inspired workspace: docks, panes, splits, a
    command palette, and Zed-format keymaps and themes.
  • Loaders and formats: PE, ELF and Mach-O, plus .NET, Java class/JAR, Android DEX, Python
    .pyc, WebAssembly, JavaScript, and ZIP-based containers (ZIP64, JAR, APK).
  • Disassembly and analysis for x86/x86-64 and ARM64: functions, control-flow graphs, cross
    references, strings, renaming, comments and bookmarks.
  • A decompiler that speaks Rust, including a Rust port mode that turns assembly into
    compilable Rust.
  • Run, debug and solve: a native debugger (Windows; Linux experimental), an x86-64 emulator
    with time-travel tracing, a symbolic solver, devirtualization, and binary diffing.
  • Malware analysis: triage with imphash, fuzzy hashes and IOCs, YARA-X scanning, and a sandbox
    that requires a VM, contains the whole process tree and offers a fake network.
  • Built-in tools: an in-app assembler and patcher, a CyberChef-style transform workbench, a
    code editor with language-server support, a debug-adapter client and an integrated terminal.
  • Extensible: runs Zed extensions (themes, grammars, language servers, WASM) and Rhai scripts.
  • Learn inside the tool: the ORRESS Academy — 8 levels, 37 lessons, practice crackmes and a
    CPU simulator.
  • AI, your way: an assistant on your Claude plan (via the claude CLI), the Claude API, any
    OpenAI-compatible or local model, or fully offline; plus an MCP server (orress-mcp) that exposes
    ORRESS's engines to AI agents.
  • Team play: end-to-end-encrypted real-time collaboration through a small relay
    (orress-relay), with CTFd and rCTF integration.

Fixed (since the pre-release builds)

  • Mach-O executables now report their real entry point: LC_MAIN stores a file offset, which
    is now translated to a virtual address (previously "go to entry" and analysis seeding were off
    on every macOS binary).
  • Linux position-independent executables are classified as executables, not libraries.
  • Mach-O imports are resolved to their stubs and GOT slots (from the indirect symbol table), so
    calls into system libraries are named in macOS binaries.

Security

  • Extensions run in the wasmtime 36 long-term-support series with path confinement, a filtered
    environment and an execution policy; YARA-X is held on a release built on the same patched
    series.
  • Dependencies are checked by cargo deny (RustSec advisories, licenses, sources) on every push
    and daily.

Downloads

Platform Archive
Windows (x86-64) orress-*-x86_64-pc-windows-msvc.zip
Linux (x86-64) orress-*-x86_64-unknown-linux-gnu.tar.gz
Linux (ARM64) orress-*-aarch64-unknown-linux-gnu.tar.gz
macOS (Apple Silicon) orress-*-aarch64-apple-darwin.tar.gz
macOS (Intel) orress-*-x86_64-apple-darwin.tar.gz

Each archive has a .sha256 checksum. Linux needs libxkbcommon, GTK 3 and Wayland or X11
(present on desktop distributions). The macOS builds are not notarized yet: after unpacking,
run xattr -dr com.apple.quarantine orress-* once, or right-click orress → Open. macOS
support is new — please report problems.

Assets 12
Loading