flare-floss

library3.1.1pypypi✓ verified 85d ago

FLARE Obfuscated String Solver (FLOSS) is a tool for automatically extracting obfuscated strings from malware, including stacked strings, decoded strings, and statically-analyzed API strings. Current version 3.1.1, released periodically via Mandiant.

devops

pip install flare-floss

github ↗package ↗docs ↗

INSTALL

IMPORT

SIG · FLARE-FLOSS

flare-floss

devopspythonv3.1.1

harness data pending

Install & Compatibility

Where this runs

No compatibility data collected yet for this library.

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

main

✓ from floss import main

✗ from floss.floss import main

Floss 3.x uses a flat module structure; older docs may reference nested imports.

Scans a binary with default settings and prints extracted strings as JSON.

import json from floss import main # Run FLOSS on a binary (example: /bin/ls) result = main.scan_file('/bin/ls') print(json.dumps(result, indent=2, default=str))

floss --version

Debug

Known issues

breakingFLOSS 3.0 dropped support for vivisect (old static analysis engine). Code using vivisect paths will fail.

fix

Upgrade to 3.x and use the new API (floss.main.scan_file).

affects: <3.0

gotchaThe CLI is the primary interface; the Python API is not fully documented and may change between minor versions.

fix

Use subprocess to call floss CLI for stable behavior, or pin to a specific floss version.

affects: >=3.0

Errors

Common errors & fixes

ModuleNotFoundError: No module named 'floss'

Package not installed or installed in wrong environment.

fix

Run 'pip install flare-floss' in the correct Python environment.

ImportError: cannot import name 'main' from 'floss'

Using incorrect import path; floss 3.x moved the API.

fix

Use 'from floss import main' instead of 'from floss.floss import main'.

Upgrade

Version history

3.1.1latest on PyPI · released Sep 26, 2024

Audit

Dependencies

No dependency data recorded yet.

Agent activity

4 hits · last 30 days

node

Resources

githubhttps://github.com/mandiant/flare-floss ↗

packagehttps://pypi.org/project/flare-floss/ ↗

docshttps://github.com/mandiant/flare-floss/tree/master/doc ↗