flare-floss
flare-floss copied to clipboard
mandiant
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
(spawned from #731) Hey @r0ny123! The smallest bit of documentation on QUANTUMSTRAND is here: [readme.md](https://github.com/mandiant/flare-floss/blob/quantumstrand/floss/qs/readme.md) and a prelease4 build here: [Release: quantumstrand-prerelease4](https://github.com/mandiant/flare-floss/releases/tag/quantumstrand-preview4). @mr-tz and I have a *lot* of things...
via #761 and @r0ny123 > For example, to build the expert db, we can use GitHub CI, to automatically add the strings from capa rules whenever a rule with a...
via #761 and @r0ny123 add an option to disable the printing of common/library strings to the console. and expanding on this: any tag specified by the user. currently #code is...
via #761 and @r0ny123 naturally a good and useful feature. we should also explain in the documentation how we came up with our default (which i think is 6).
via #761 and @r0ny123 > Currently, QS ranks strings based on offsets within sections, can we use stringsifter or something like that to show the most relevant strings first within...
if our code recovery solution (lancelot or vivisect) fails to identify some code, then we may still display some junk strings that are actually instructions, like ``` ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ .text ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┫┃...
(spawned from #731) Hey @cxiao! The smallest bit of documentation on QUANTUMSTRAND is here: [readme.md](https://github.com/mandiant/flare-floss/blob/quantumstrand/floss/qs/readme.md) and a prelease4 build here: [Release: quantumstrand-prerelease4](https://github.com/mandiant/flare-floss/releases/tag/quantumstrand-preview4). @mr-tz and I have a *lot* of things...
Hi, this more a feature request than a bug report. I was analyzing a 23.0 MB windows executable (with `--large-file`, which seems undocumented using `--help` btw) and after 12-24 hours...
Floss Version Tried: 2.2.0 and 2.0.0 Platform: Ubuntu 21.04, Windows 10 and Windows 11 Example reference file: https://www.virustotal.com/gui/file/9cc387fd485e91fc58a626d2c64b85e0502ba60f3718afd7b5fd6e5b46721bb9 On the above file, floss runs for hours when you `floss.exe -n...
