mirror of
https://github.com/vee1e/flare-floss.git
synced 2026-09-01 17:57:06 +00:00
Implement the first batch of the FLOSS migration development spec. CLI: - remove --no-layout, --no-tags, -l/--load, -H, --no, and --only - add --string-type and --no-string-type to replace --no and --only - rename --functions to --analyze-functions - load a saved JSON results document automatically from file content - print the full option list when run with no arguments (exit 1) - always show the full option list in --help; --version exits 0 Metrics: - add layout and tags runtime timing fields to the results document - record elapsed time for the layout/tag step and tag DB matching Other: - point the tag scripts at the current tag database location Update the CLI tests and the usage documentation for the new flags. |
||
|---|---|---|
| .. | ||
| analysis | ||
| disassemblers | ||
| tags | ||
| __init__.py | ||
| README.md | ||
FLOSS Scripts
Auxiliary scripts live under scripts/, grouped by purpose:
| Directory | Purpose |
|---|---|
disassemblers/ |
Convert classic FLOSS JSON output into import scripts for Binary Ninja, Ghidra, IDA Pro, Radare2, and x64dbg; includes the IDA plugin |
tags/ |
Build and maintain FLOSS tag databases (global prevalence, OSS libraries, VT feeds) |
analysis/ |
Batch analysis helpers |
disassemblers/
Turn FLOSS JSON (floss -j sample.exe > results.json) into tool-specific artifacts.
- Run a render script, redirecting stdout to a file.
- Import or run the generated artifact in the target tool.
Example (Ghidra):
$ python render-ghidra-import-script.py results.json > apply_floss.py
See disassemblers/ for per-tool scripts and the IDA plugin (File → Script file… in IDA Pro).
Install FLOSS from source first; see installation.
tags/
Scripts that extract strings, build tag databases, and query them. See tags/README.md for the full pipeline.
analysis/
bulk_analyze.py— runflossover every binary in a directory and write JSON results.
Language-specific data maintenance (for example regenerating the Rust version hash database) lives alongside the implementation under floss/language/.