vee1e/flare-floss
1
0
Fork 0
mirror of https://github.com/vee1e/flare-floss.git synced 2026-09-01 17:57:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
flare-floss/scripts
History
lakshit verma d5688a784a
style: fix isort/black/mypy for layout/tags refactor 
Format the new modules, teach mypy about layout/tag third-party imports,
exclude scripts/tags from mypy dual-module issues, and fix a few type
errors uncovered by the full pre-commit suite.
2026-07-11 15:32:19 +05:30
..
tags style: fix isort/black/mypy for layout/tags refactor 2026-07-11 15:32:19 +05:30
build_oss_db.py style: fix isort/black/mypy for layout/tags refactor 2026-07-11 15:32:19 +05:30
bulk_analyze.py style: fix isort/black/mypy for layout/tags refactor 2026-07-11 15:32:19 +05:30
extract_rust_hashes.py style: fix isort/black/mypy for layout/tags refactor 2026-07-11 15:32:19 +05:30
idaplugin.py style: auto-format with black and isort 2026-03-13 09:47:53 +00:00
README.md Added docs for scripts in FLOSS (#677) 2023-04-04 13:40:22 +02:00
render-binja-import-script.py style: auto-format with black and isort 2026-03-13 09:47:53 +00:00
render-ghidra-import-script.py style: auto-format with black and isort 2026-03-13 09:47:53 +00:00
render-ida-import-script.py style: auto-format with black and isort 2026-03-13 09:47:53 +00:00
render-r2-import-script.py style: auto-format with black and isort 2026-03-13 09:47:53 +00:00
render-x64dbg-database.py style: auto-format with black and isort 2026-03-13 09:47:53 +00:00

README.md

FLOSS Scripts

FLOSS supports converting its output into scripts for various tools. Please see the render scripts in this directory.

Additionally, there is another plugin for IDA to allow FLOSS to automatically extract obfuscated strings and apply them to the currently loaded module in IDA. idaplugin.py is a IDAPython script you can directly run within IDA Pro (File - Script File... [ALT + F7]).

Installation

These scripts can be downloaded from the FLOSS GitHub repository alongside the source, which is required for the scripts to run. To install FLOSS as source, see the documentation here.

Usage

Convert FLOSS output for use by other tools

  • Run FLOSS on the desired executable with the -j or --json argument to emit a JSON result and redirect it to a JSON file.
    $ floss -j suspicious.exe > floss_results.json

For Binary Ninja, IDA Pro, Ghidra or Radare2:

  • Run the script for your tool of choice by passing the result json file as an argument and redirect the output to a Python (.py) file.

Ghidra Example:
$ python render-ghidra-import-script.py floss_results.json > apply_floss.py

  • Run the Python script apply_floss.py using the desired tool.

For x64dbg:

  • Instead of a Python file, redirect the output to a .json file.
    $ python render-x64dbg-database.py floss-results.json > database.json

  • Open the JSON file database.json in x64dbg.