FLARE Obfuscated String Solver (FLOSS) is a malware analysis utility that automatically extracts and deobfuscates strings from executable binaries.
It complements basic strings tools by recovering data that malware commonly builds, decodes, or stores in formats that don’t appear as plaintext, helping analysts surface configuration data, domains, file paths, and other indicators during static analysis.
This is free and open source software.
Key Features
- Extracts regular ASCII and UTF-16LE static strings from binaries.
- Recovers stack strings, tight strings, and decoded strings.
- Supports language-specific string extraction from Go and Rust programs.
- Works as a command line utility for analysing suspicious executables.
- Offers options to focus on selected string types or omit static strings.
- Includes helper scripts for loading output into Binary Ninja and IDA Pro.
- Cross-platform support – runs under Linux, macOS, and Windows.
Website: github.com/mandiant/flare-floss
Support:
Developer: Mandiant
License: Apache License 2.0
FLOSS is written in Python. Learn Python with our recommended free books and free tutorials.
Related Software
| Binary Analysis Tools | |
|---|---|
| Ghidra | Software reverse engineering framework |
| Radare2 | Portable reversing framework |
| Cutter | Graphical reverse engineering platform |
| Capstone | Lightweight multi-architecture disassembly framework |
| Detect it Easy | File inspection utility |
| ImHex | Analyze binary data |
| Miasm | Reverse engineering framework for analysing and emulating binaries |
| Reko | General-purpose decompiler for machine-code binaries |
| capa | Command line malware analysis tool |
| binwalk | Search a given binary image for embedded files |
| FLOSS | FLARE Obfuscated String Solver |
| unblob | Extraction suite for working with unknown binary blobs |
| Rizin | UNIX-like reverse engineering framework |
| REDasm | Cross-platform disassembler with an extensible graphical interface |
| Pharos | Framework for automated static analysis of binary programs |
| LIEF | Work with executable and binary formats |
| RetDec | Retargetable machine-code decompiler |
| knife | Static binary triage, disassembly and vulnerability analysis toolkit |
Read our verdict in the software roundup.
 Explore our carefully curated directory of recommended free and open source software, covering every major software category.The directory forms part of our extensive collection of articles for Linux enthusiasts. It includes hundreds of detailed reviews, together with free and open source alternatives to proprietary software from companies such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. LinuxLinks also covers interesting projects worth exploring, Linux-compatible hardware, free programming books and tutorials, and much more. Know a useful free and open source Linux application that we haven’t covered? Tell us about it using our submission form. |
Please read our Comment Policy before commenting.