python-flirt

A Python library for parsing, compiling, and matching Fast Library Identification and Recognition Technology (FLIRT) signatures.


Keywords
flirt, malware-analysis, reverse-engineering
License
Apache-2.0
Install
pip install python-flirt==0.8.10

Documentation

Lancelot

CI Status

intel x86(-64) code analysis library that reconstructs control flow

dependencies

  • make
  • cmake
  • pkg-config

maintenance

$ rustup update  # update rust compiler

$ cargo update  # update dependencies, not crossing major versions

$ cargo outdated -x unicorn  # find outdated major version dependencies

because we use an older version of unicorn thats easier to build with cargo, we want to ignore any old dependencies stemming from unicorn.

testing

$ pushd core; cargo test; popd
$ pushd flirt; cargo test; popd
$ pushd bin; cargo test; popd

$ pushd pylancelot
$   # install maturin if necessary
$   maturin develop --extras dev
$   pytest
$ popd

$ pushd pyflirt
$   # install maturin if necessary
$   maturin develop  --extras dev
$   pytest
$ popd