Spring Snake

Major changes:

• filtering of false positive deobfuscated strings
• new --no-filter option to disable filtering
• improved heuristics to find stackstrings
• enhanced stackstrings extraction
• additional API hooks, improving emulation coverage

Please be aware that some of the APIs, e.g. decode_strings and extract_stackstrings, changed.

BHEU Bald Eagle

Major changes:

• analyze shellcode from raw binary files
• 32bit and 64bit standalone nightly builds for Windows
• support for x64dbg database file
• display vivisect analysis meta information
• new plugin to identify decoding routines based on suspicious mov instructions
• additional API hooks, improving emulation coverage
• fewer false positive decoded strings

#DFIRSummit Dragon

major changes:

• drastically improve performance, esp. for complex binaries
• improve command line argument handling
• enable static strings output, simplify default output mode
• add r2 scripting support
• fix bug extracting static strings from non-PE binaries
• add additional API hooks, improving emulation coverage
• filter out even more non-sensical strings

Computer Science Fair Fox

major changes:

• add testing framework
• add tests for known decoding routines
• improve formatting of tables (headers, column spacing, etc.)
• enable nightly builds
• support osx standalone binaries
• improved detection of decoding routines
• fix emulation of some specific assembly instructions
• add additional api hooks for memory allocation and manipulation
• prepare for use in tool frameworks

AtlSecCon Atlas

Lots of new features, including:

• static strings mode: for extracting cleartext strings like strings.exe.
• quiet mode: for piping output to grep.
• improved documentation everywhere (github & source code).
• can use FLOSS as a Python library in other tools.
• simplified code for long term maintenance.

v1.0.3

setup: bump to 1.0.3

v1.0.2

setup.py: bump to 1.0.2

Tarheel Torpedo

Initial release. Differs from release "Initial Release" only in version number (1.0.1) to ensure we got the GitHub versioning process down correctly.

Initial Release

Initial release.