awesome-repositories.com
Blog
MCP
awesome-repositories.com

Entdecke die besten Open-Source-Repositories mit KI-gestützter Suche.

EntdeckenKuratierte SuchenOpen-Source-AlternativenSelf-hosted SoftwareBlogSitemap
ProjektÜber unsRanking-MethodikPresseMCP-Server
RechtlichesDatenschutzAGB
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·
mandiant avatar

mandiant/flare-floss

0
View on GitHub↗

Flare Floss

Flare-floss is a security utility and static binary string extractor designed to uncover hidden text and configuration data within compiled binaries. It functions as an obfuscated string decoder and reverse engineering tool to translate encoded strings into readable text for security auditing.

The project employs emulated execution to capture the decrypted state of strings in memory by running small chunks of binary code in a virtual CPU. It further utilizes static analysis disassembly, intermediate representation analysis, and heuristic-based pattern matching to identify and decode strings that use non-standard encodings or lack standard null terminators.

The toolset supports workflows for malware binary analysis, security research, and reverse engineering to identify embedded secrets and constants. It also provides capabilities for exporting extracted binary data to external analysis platforms.

KI-Suche

Entdecke weitere awesome Repositories

Beschreibe in einfachen Worten, was du brauchst — die KI bewertet tausende kuratierte Open-Source-Projekte nach Relevanz.

Start searching with AI

Features

  • Malware Analysis - Provides specialized tools for uncovering hidden text and configuration data within malicious software binaries.
  • Binary String Recovery - Retrieves strings from binaries using non-standard encoding or missing null-terminators to reveal hidden data.
  • Static String Extraction - Retrieves text from binaries that use unusual encodings or lack standard null terminators.
  • Reverse Engineering Tools - Extracts obfuscated strings from compiled files to help researchers understand the internal logic of a program.
  • Data Flow Analysis - Converts machine instructions into a simplified intermediate representation to track data flow and string manipulation logic.
  • Static Binary Analysis - Analyzes compiled binaries without execution to extract and decode obfuscated strings.
  • Binary String Decoders - Implements custom decoding rules to translate non-standard character sets and missing null-terminators into readable text.
  • Binary Pattern Matching - Scans binary data for specific byte sequences and opcodes to identify obfuscated string routines.
  • Dynamic String Decryption - Uses emulated execution in a virtual CPU to capture the decrypted state of strings in memory.
  • Malware Analysis Tools - Acts as a security utility designed to uncover hidden configuration data within malicious software samples.
  • Obfuscated Data Decoders - Translates hidden or encoded strings into readable text to reveal sensitive configuration data.
  • Pattern-Based Disassembly - Employs disassembly to identify code patterns and locate functions responsible for string decryption.
  • Static Memory Analysis - Maps executable files into virtual address space to analyze data offsets and cross-references without executing the process.
  • Security Auditing Tools - Identifies embedded secrets and constants in binaries for deep security auditing and inspection.
  • Carving and Extraction - Deobfuscates strings from malware binaries for static analysis.
3,886 Stars·517 Forks·Python·apache-2.0·11 Aufrufe

Star-Verlauf

Star-Verlauf für mandiant/flare-flossStar-Verlauf für mandiant/flare-floss

Häufig gestellte Fragen

Was macht mandiant/flare-floss?

Flare-floss is a security utility and static binary string extractor designed to uncover hidden text and configuration data within compiled binaries. It functions as an obfuscated string decoder and reverse engineering tool to translate encoded strings into readable text for security auditing.

Was sind die Hauptfunktionen von mandiant/flare-floss?

Die Hauptfunktionen von mandiant/flare-floss sind: Malware Analysis, Binary String Recovery, Static String Extraction, Reverse Engineering Tools, Data Flow Analysis, Static Binary Analysis, Binary String Decoders, Binary Pattern Matching.

Welche Open-Source-Alternativen gibt es zu mandiant/flare-floss?

Open-Source-Alternativen zu mandiant/flare-floss sind unter anderem: fireeye/flare-floss — This project is a binary static analysis tool designed to recover hidden and non-standard encoded strings from… de4dot/de4dot — de4dot is a .NET deobfuscator and unpacker designed to reverse obfuscation and restore readable code and metadata… 0xd4d/de4dot — de4dot is a .NET deobfuscator, unpacker, and assembly analysis tool. It is designed to remove obfuscation layers,… virustotal/yara — YARA is a pattern matching engine and binary analysis tool used to identify and classify malware samples. It functions… avast-tl/retdec — Retdec is an LLVM-based machine code decompiler and static binary analysis tool designed for binary reverse… rpisec/malware — This project is a cybersecurity educational resource and courseware designed for malware analysis and reverse…

Open-Source-Alternativen zu Flare Floss

Ähnliche Open-Source-Projekte, sortiert nach der Anzahl der gemeinsamen Funktionen mit Flare Floss.
  • fireeye/flare-flossAvatar von fireeye

    fireeye/flare-floss

    4,054Auf GitHub ansehen↗

    This project is a binary static analysis tool designed to recover hidden and non-standard encoded strings from compiled binaries. It functions as a malware analysis utility and string decryptor, extracting obfuscated text to reveal concealed program behavior without executing the code. The tool automates the recovery of embedded strings through a combination of emulated instruction execution and abstract syntax tree evaluation. It utilizes pattern-based heuristic detection to identify obfuscation routines and employs cross-platform binary parsing to process multiple executable formats. The s

    Python
    Auf GitHub ansehen↗4,054
  • de4dot/de4dotAvatar von de4dot

    de4dot/de4dot

    7,428Auf GitHub ansehen↗

    de4dot is a .NET deobfuscator and unpacker designed to reverse obfuscation and restore readable code and metadata within .NET assemblies. It functions as a bytecode analyzer that simplifies control flow, strips anti-debugging protections, and extracts original payloads from packed executable wrappers. The project distinguishes itself through a modular deobfuscation pipeline and a sandbox environment used for dynamic string decryption, which executes decryption methods to replace encrypted strings with plain-text values. It can identify specific obfuscation tools through pattern-based binary a

    C#
    Auf GitHub ansehen↗7,428
  • 0xd4d/de4dotAvatar von 0xd4d

    0xd4d/de4dot

    7,426Auf GitHub ansehen↗

    de4dot is a .NET deobfuscator, unpacker, and assembly analysis tool. It is designed to remove obfuscation layers, restore metadata, and simplify bytecode control flow to transform protected binaries back into human-readable code. The project features specialized systems for decrypting strings and constants using both static and dynamic analysis. It identifies specific protection tools through pattern-based detection and strips anti-analysis protections, such as tamper detection and anti-debugging code. The tool provides a suite of reverse engineering capabilities, including binary wrapper un

    C#
    Auf GitHub ansehen↗7,426
  • virustotal/yaraAvatar von VirusTotal

    VirusTotal/yara

    9,420Auf GitHub ansehen↗

    YARA is a pattern matching engine and binary analysis tool used to identify and classify malware samples. It functions as a malware research framework that allows for the definition of file descriptions and detection rules to find indicators of compromise within binaries. The system enables the creation of custom detection rules using strings, wildcards, and regular expressions. These rules use boolean logic to match textual or binary patterns, allowing for the classification of files into specific malware families and the automation of threat intelligence. The engine utilizes Aho-Corasick s

    Cyara
    Auf GitHub ansehen↗9,420
    • Alle 30 Alternativen zu Flare Floss anzeigen→