vee1e/flare-floss
1
0
Fork 0
mirror of https://github.com/vee1e/flare-floss.git synced 2026-09-01 17:57:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
2718 commits 11 branches 32 tags 26 MiB
Commit graph

62 commits

Author SHA1 Message Date
Ana Maria Martinez Gomez
ab07022ff3
[copyright + license] Fix headers 
Replace the header from source code files using the following script:
```Python
for dir_path, dir_names, file_names in os.walk("flare-floss"):
    for file_name in file_names:
        try:
            file_path = f"{dir_path}/{file_name}"
            f = open(file_path, "rb+")
            content = f.read()
            m = re.search(OLD_HEADER, content)
            if not m:
                continue
            print(f"{file_path}: {m.group('year')}")
            content = content.replace(m.group(0), NEW_HEADER % m.group("year"))
            f.seek(0)
            f.write(content)
        except:
            continue
```

Some files had the copyright headers inside a `"""` comment and needed
manual changes before applying the script.

The old header had the confusing sentence `All rights reserved`, which
does not make sense for an open source license. Replace the header by
the default Google header that corrects this issue and keep floss
consistent with other Google projects.
 2025-01-14 17:52:22 +01:00
Aayush Goel
79347cfc98 Resolved positional Arguments error 
Added keywords to resolve positional arguments error
 2023-05-05 01:37:02 +05:30
Moritz Raabe
6767ff4642 feat: ignore pre_ctx stackstrings 2022-08-26 16:14:54 +02:00
Moritz Raabe
34d360a511 feat!: load and render from existing results doc 2022-06-01 00:03:35 +02:00
Moritz
23e07269c9
Update to new viv-utils API (#524) 
* feat!: update to new viv-utils API

* fix!: use new driver and disable vivisect hooks

* setup: bump viv-utils to v0.7.1

* dep: bump viv-utils

* test: sync test-files

* test: sync test-files

Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
 2022-04-20 22:03:48 +02:00
Moritz Raabe
a79ce2f91a fix: improve tight loop pruning 2022-03-24 16:17:23 +01:00
Moritz Raabe
aad5696ce9 do not strip bytes so we can track offsets 2022-03-14 18:14:06 +01:00
Moritz Raabe
303231bcde fix tests, disable strip for now 2022-03-11 22:05:04 +01:00
Moritz Raabe
55da749b49 new tightstring algorithm and many other fixes 2022-03-11 20:43:18 +01:00
Moritz Raabe
724ddf4c2d rename to logging_ to avoid shadowing default name 2022-03-10 12:40:39 +01:00
Moritz Raabe
4faa0337cc fix type information 2022-03-09 16:04:11 +01:00
Moritz Raabe
fe1934bf84 improve decoding and reorder stackstrings and decoded strings 2022-03-09 15:59:51 +01:00
Moritz Raabe
1a773f1fbd improve logging and results output 2022-03-08 16:01:38 +01:00
Moritz Raabe
b54cb520cd tweak logging and results output 2022-02-26 11:34:57 +01:00
Moritz Raabe
9a41e1a90a improve tightstrings, general string extraction, and filtering 2022-02-24 13:47:02 +01:00
Moritz Raabe
7f5dbdf1e2 reorg extract strings and black format 2022-02-23 11:04:36 +01:00
Moritz Raabe
ec1503e312 cleanup string extraction, reduce code repetitions 2022-02-23 10:53:19 +01:00
Moritz Raabe
921b96ef6c cleanup and fixes 2022-02-03 14:18:39 +01:00
Moritz Raabe
8c1346797d add TRACE logging via -dd 2021-11-08 19:32:38 +01:00
Moritz Raabe
3c7a4dd8d8 add tightloop string extraction 2021-10-22 16:51:49 +02:00
Moritz Raabe
8c59808ae6 s/fireeye/mandiant/ 2021-09-29 16:50:38 +02:00
William Ballenthin
b4cfc21161 emulator: use non-ascii taint byte 
closes #360
 2021-08-03 10:49:02 -06:00
William Ballenthin
e86fe0db13 *: mypy fixes 2021-08-03 10:22:46 -06:00
William Ballenthin
35703da3e3 stackstrings: fix name error 
ref #212
 2021-08-03 08:18:02 -06:00
William Ballenthin
99698d0d85 move code to floss.results module 2021-08-02 09:14:52 -06:00
William Ballenthin
75e1e4d0bd pep8 2021-07-21 11:06:25 -06:00
William Ballenthin
08c854e3a6 *: factor result objects into their own namespace 2021-07-21 10:49:38 -06:00
Moritz Raabe
978a8f8f35 fix black code style 2020-11-03 21:16:38 +01:00
Moritz Raabe
e21752ec5e fix isort 2020-11-03 21:13:32 +01:00
Matt Miller
f552347120 import formatting 2020-06-11 10:39:01 -05:00
Matt Miller
9072866515 linter and syntax fix 2020-06-10 22:27:39 -05:00
Matt Miller
caa49bf2ff reorg constants 2020-06-10 22:16:13 -05:00
Moritz Raabe
c65fff59c9 use min-length in extraction phase 2017-04-24 18:04:28 +02:00
Moritz Raabe
22741bbd37 add --no-filter option 2017-04-24 14:01:10 +02:00
Moritz Raabe
f5bb029870 enhanced FP filtering 2017-04-18 21:08:23 +02:00
Moritz Raabe
2a4c51c098 return None instead of raising exception 2017-04-13 19:20:12 +02:00
Moritz Raabe
6c3853384c add FP filter 2017-04-13 19:16:22 +02:00
Moritz Raabe
058fc0ece7 move filter to exception throwing function 2017-04-13 19:15:31 +02:00
Moritz Raabe
eca2c0e257 also account for RegMemOpers 2017-04-07 19:30:22 +02:00
Willi Ballenthin
e229eb6491 stackstrings: rename heuristic function. 2017-04-04 14:53:53 -04:00
Willi Ballenthin
cc587f2c36 stackstrings: remove extra parameter to is_stack_mov method. 2017-04-04 14:51:41 -04:00
Willi Ballenthin
50b12146f9 stackstrings: formatting. 2017-04-04 14:47:25 -04:00
Willi Ballenthin
516959707b stackstrings: formatting. 2017-04-04 14:38:14 -04:00
Willi Ballenthin
4008147604 stackstrings: just some formatting tweaks. 2017-04-04 14:35:03 -04:00
Willi Ballenthin
495885ef93 stackstrings: generate bb end index inside api. 2017-04-04 14:03:04 -04:00
Willi Ballenthin
f3b64415c1 stackstrings: rename bb end index to bb ends. 2017-04-04 13:59:49 -04:00
Willi Ballenthin
78a1bfb6e6 stackstrings: use set, not list, for lookups. 2017-04-04 13:58:40 -04:00
Willi Ballenthin
4f25c38893 stackstrings: refactor out constants 2017-04-04 13:50:24 -04:00
Moritz Raabe
4ae6fc176e enable feature 2017-03-31 17:45:10 +02:00
Moritz Raabe
eacf15c834 generate index of bb ends once 2017-03-31 17:25:02 +02:00