mandiant/flare-floss

View on GitHub

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

Stars: 4.2k
Forks: 542
Open beginner issues: 0
Indexed issues: 104
Avg merge: 2d 12h
Merged PRs (30d): 26

Dominant language: Python
License: Apache-2.0
Last GitHub push: Sep 8, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

104 open issues indexed

auto build string dbs from capa rules Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

mandiant/flare-floss#1429 · 1 reaction · Opened Sep 7, 2026
Static Extraction: String Fragmentation & RVA Overflow Mapping Mismatches Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

mandiant/flare-floss#1425 · 2 comments · Opened Sep 4, 2026
qs: consider tagging debug info strings or sections Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

mandiant/flare-floss#1420 · 1 reaction · Opened Sep 2, 2026
Use Idalib instead of lancelot Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mandiant/flare-floss#1408 · Opened Aug 27, 2026
Housekeeping: audit of stale feature branches Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

mandiant/flare-floss#1406 · 2 comments · Opened Aug 25, 2026
viewer: add basic tests (lint/build in CI + smoke test) Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

mandiant/flare-floss#1402 · Opened Aug 24, 2026
Decide the default string-deobfuscation behavior (all vs. static-only opt-in) Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

mandiant/flare-floss#1379 · Opened Aug 19, 2026
Version bump for the QS release + backward-compat aliases for --only/--no Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

mandiant/flare-floss#1378 · 1 comment · Opened Aug 19, 2026
Viewer: tag filter should support include/exclude + neutral state, or an AND/OR mode switch Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

mandiant/flare-floss#1377 · Opened Aug 19, 2026
Fix 10 correctness/regression issues found in review of #1372 before merging QUANTUMSTRAND into master Open

QS

mandiant/flare-floss#1375 · 4 comments · 1 assignee · Opened Aug 18, 2026
Consider Rust or Go reimplementation of at least static extraction, layout, and tagging Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

mandiant/flare-floss#1374 · Opened Aug 18, 2026
Serve the web viewer from the standalone FLOSS binary Open

enhancement QS/ui

Difficulty 4/5 3-5 days Newbie friendliness 55/100

mandiant/flare-floss#1371 · 5 comments · Opened Aug 18, 2026
Cache key does not cover analysis options Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

mandiant/flare-floss#1369 · 2 comments · Opened Aug 18, 2026
Docs: revisit what to keep vs. filter during rendering (tags, cache, options) Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

mandiant/flare-floss#1368 · Opened Aug 18, 2026
Feature Request: Token-efficient --llm output mode for AI agent consumption Open

Difficulty 5/5 Over a week Newbie friendliness 45/100

mandiant/flare-floss#1365 · 1 reaction · Opened Aug 17, 2026
Enhancement: Tagging, filtering, and summary features fail for unstructured files Open

Difficulty 3/5 1-2 days Newbie friendliness 64/100

mandiant/flare-floss#1364 · Opened Aug 17, 2026
Profile test performance and improve it Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

mandiant/flare-floss#1363 · 1 comment · Opened Aug 17, 2026
Track CLI option/string-type interaction complexity from iteration 4 review Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

mandiant/flare-floss#1362 · Opened Aug 16, 2026
Profile performance and improve before release Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mandiant/flare-floss#1361 · 1 reaction · Opened Aug 14, 2026
floss run without args - show shorter help output Open

Difficulty 2/5 1-3 hours Newbie friendliness 48/100

mandiant/flare-floss#1359 · Opened Aug 12, 2026
Update Go and Rust global prevalence databases with a larger data set Open

QS

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mandiant/flare-floss#1357 · Opened Aug 11, 2026
Create .NET specific global prevalence database Open

QS

Difficulty 5/5 Over a week Newbie friendliness 25/100

mandiant/flare-floss#1356 · Opened Aug 11, 2026
fix(ghidra): generated import script fails Python parsing Open

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

mandiant/flare-floss#1351 · 1 reaction · Opened Aug 8, 2026
QS: Clean and unify the FLOSS arguments Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

mandiant/flare-floss#1348 · Opened Jul 27, 2026
FLIRT analysis panic on PE file with zero-length section Open

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

mandiant/flare-floss#1345 · 2 comments · Opened Jul 24, 2026
Consider signing releases/tags Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

mandiant/flare-floss#1316 · Opened Jun 3, 2026
Consider adding SECURITY.md Open

Difficulty 1/5 Under an hour Newbie friendliness 35/100

mandiant/flare-floss#1315 · Opened Jun 3, 2026
QS: Profile overhead of structure parsing for PE, ELF and Mach-O Open

QS

mandiant/flare-floss#1314 · 1 assignee · Opened Jun 3, 2026
Create sample test corpus/benchmark to track progress of string tagging Open

QS

Difficulty 5/5 Over a week Newbie friendliness 38/100

mandiant/flare-floss#1311 · 1 comment · 1 reaction · Opened Jun 2, 2026
Implement ELF for Rust Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

mandiant/flare-floss#1286 · 1 comment · 1 reaction · Opened Apr 29, 2026
qs: tag for string that is not referenced by code Open

QS

Difficulty 5/5 Over a week Newbie friendliness 25/100

mandiant/flare-floss#1236 · 4 comments · Opened Mar 16, 2026
Deobfuscation not available when redirecting STDOUT Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

mandiant/flare-floss#1176 · 1 comment · 1 reaction · Opened Oct 13, 2025
Merge QS and Capa Viewer into a singular application Open

QS

Difficulty 5/5 Over a week Newbie friendliness 25/100

mandiant/flare-floss#1163 · Opened Aug 31, 2025
IDA and x64dbg render scripts do not take in all of the exported strings into the database. Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

mandiant/flare-floss#1160 · Opened Aug 20, 2025
QS: use idalib for code discovery etc. Open

QS

Difficulty 5/5 Over a week Newbie friendliness 20/100

mandiant/flare-floss#1147 · 1 comment · 2 reactions · Opened Jul 9, 2025
--only decoded for DeadByDaylight-Win64-Shipping not work Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

mandiant/flare-floss#1135 · Opened Jun 11, 2025
[request] Documentation for JSON output Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

mandiant/flare-floss#1129 · 1 comment · Opened May 28, 2025
terminated by signal SIGKILL (Forced quit) when attempting to deobfuscate strings in packed .NET binaries Open

viv-bug

Difficulty 4/5 3-5 days Newbie friendliness 30/100

mandiant/flare-floss#1087 · 2 comments · 1 reaction · Opened Dec 23, 2024
High memory usage when analyzing VMProtect-protected sample with FLOSS Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

mandiant/flare-floss#1084 · 1 comment · 1 reaction · Opened Dec 3, 2024
Release new version Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

mandiant/flare-floss#1083 · 2 comments · Opened Nov 27, 2024
Leverage Malpedia FLOSSed data Open

QS

Difficulty 5/5 Over a week Newbie friendliness 25/100

mandiant/flare-floss#962 · Opened Mar 8, 2024
Unable to find stack strings in large functions alloca_probe / XMM registers Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

mandiant/flare-floss#942 · 4 comments · Opened Feb 1, 2024
Change 2 scripts Open

good first issue

mandiant/flare-floss#939 · 14 comments · 1 assignee · Opened Jan 24, 2024
UI: show file offsets and virtual address in verbose output for language-specific strings (Go and Rust) Open

enhancement good first issue

mandiant/flare-floss#937 · 11 comments · 1 assignee · Opened Jan 16, 2024
rust: lots of junk strings Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

mandiant/flare-floss#931 · 2 comments · Opened Jan 2, 2024
Identify and extract strings from programs written in Swift Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

mandiant/flare-floss#876 · 3 comments · 5 reactions · Opened Sep 1, 2023
Rust performance issues Open

Difficulty 4/5 3-5 days Newbie friendliness 28/100

mandiant/flare-floss#873 · 2 comments · 1 reaction · Opened Aug 30, 2023
Go language string extraction: improve support for 1.12 Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 42/100

mandiant/flare-floss#872 · 1 reaction · Opened Aug 30, 2023
rendering slow (language strings) Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 25/100

mandiant/flare-floss#870 · 3 comments · 1 reaction · Opened Aug 29, 2023
Improve b2s or replace with custom code (unneded wide strings support) Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 50/100

mandiant/flare-floss#867 · 12 comments · 1 reaction · Opened Aug 28, 2023

mandiant/flare-floss

Get new issues in your inbox