Recover Struct Field Tags and Interface Method Names in GoReSym
Contributor: kami911
This project adds two missing features: struct field tag extraction and interface method name recovery. Tags like json:"user_id" tell a reverse...
Security
FLARE
Industry leading malware analysis
Technologies
Ghidraida-proPythonSandbox
Topics
decompilationdisassemblyemulationmalware-analysisreverse-engineering
- Total projects
- 11
- Years participating
- 4
- Most recent
- 2026
Participation history
Historical projects
XRefer Backend Expansion Updated Proposal Raj Mehta GSOC2026
Contributor: Raj Mehta
XRefer is a binary analysis tool built by Mandiant FLARE that uses cross-reference correlation, capa integration, and LLM-powered cluster analysis to...
Capa - Native Script Analysis Support
Contributor: saniyafatima07
This project involves working with Capa, a tool which detects capabilities in executable files. The rationale behind the project is that, current...
Extend FLOSS to use the rendering techniques pioneered by QUANTUMSTRAND
Contributor: vee1e
This project enhances FLOSS by integrating QUANTUMSTRAND’s context-aware rendering to make malware string analysis faster and more actionable....
Multi-Backend Abstraction Layer with Binary Ninja/Ghidra Support
Contributor: __mike__
Xrefer currently functions as an IDA plugin for static binary feature extraction. The goal of this project is to abstract Xrefer’s core functionality...
capa: add Frida dynamic analysis for Android
Contributor: Xukun Zhang
This project extends capa, FLARE's open-source capability detection tool, with Android dynamic analysis using Frida instrumentation. The...
capa: introduce capa explorer for web
Contributor: Soufiane Fariss
The project aims to introduce capa explorer web for capa, a reverse engineering tool developed by Mandiant's FLARE team. Capa automates the process...
Extracting Language and Runtime-Specific Strings in Go, Rust, and Beyond
Contributor: Arnav Kharbanda
The FLOSS: Language Specific Strings project aims to enhance the FLARE tool called FLOSS, which is used to deobfuscate protected strings found in...
FakeNet-NG: Implementing an Interactive Graphical Summary of NBIs
Contributor: Beleswar Prasad Padhi
FakeNet-NG is a tool that is used to simulate the internet which is useful in malware analysis. Currently, FakeNet-NG displays its output by either...
CAPA: Ghidra Integration
Contributor: Colton G
CAPA is the FLARE team’s open-source tool to identify program capabilities using an extensible rule set. Each rule is matched against features that...
capa: Capabilities from Dynamic Analysis
Contributor: yelhamer
capa is an open-source tool that identifies program capabilities using an extensible rule set. Currently, the project relies purely on static...