Releases: mandiant/flare-floss
Releases · mandiant/flare-floss
QUANTUMSTRAND preview 2
v2.2.0
v2.1.0
v2.0.0
This major update brings many new features and improvements. FLOSS now handles an additional string obfuscation technique that we call "tight strings". For details on tight strings and the additional changes please see our FLOSS Version 2.0 release blog post.
New Features
- extract tight strings
- library function recognition via FLIRT signatures
- improved logging and results output
- enhanced decoding and extraction of stackstrings and encoded strings
- shortcut emulation if no results identified
- reduce false positive strings output
- load and render existing results document
Breaking Changes
- simplified usage via improved command-line arguments
- changed many internal functions and the FLOSS API
- FLOSS supports Python 3 only now
- all output is based on JSON results document now
- revamped function identification mechanism and removed old plugin system
- more and enhanced API emulation hooks
Other Updates
- new logo and icon
- updated CI to use GitHub Actions
v1.7.0
adds:
- static string json output format @mr-tz
- test case invoking main @mr-tz
- tests via GH actions @mr-tz
- builds via GH actions, uploads to releases page @williballenthin
- pushed to pypi via GH actions @williballenthin
changes:
- package relative imports @b0urb0n
- register tests in setup.py @b0urb0n
- vivisect version @r0ny123
- code style via black, isort @mr-tz
- test files in sub repo @mr-tz
fixes:
- vivisect pyinstaller @williballenthin
- IDA 7.4+ support @Ana06
- strings algorithm via bytes @jedimasterbot
changes: v1.6.1...v1.7.0
v1.7.0-alpha2
preparing CI for release
v1.7.0-alpha1
preparing CI for release
v1.7.0-alpha0
preparing CI for release v1.7.0
hotfix v1.6.1
fixes the version embedded within the binary
2020 Twizzler
fixes:
- logging levels
- some api function hooks
- code style
adds:
- additional scripts for ida and binja
- cli option to configure max emulation instruction count
- option to emit json file with results
contributors:
Thanks, all!