Skip to content
This repository has been archived by the owner on Dec 4, 2024. It is now read-only.

FIRST Server BETA v0.0.3

Compare
Choose a tag to compare
@demonduck demonduck released this 13 Sep 16:32
· 46 commits to dev since this release

The Function Identification and Recover Signature Tool (FIRST) developed by Talos, is an IDA Pro plugin that allows reverse engineers to more quickly complete static analysis. It makes finding similar functions faster and easier by removing the need to synchronize function metadata.

FIRST’s extensible framework allows users to submit function metadata to a repository and search the repository for function metadata similar to the function

Users can contribute function metadata and search for function metadata similar to the function(s) being analyzed in IDA. FIRST’s framework allows developers to create new ways to derive similarities between functions.

  • Save function metadata (name, prototype, and comment)
  • Provide way to find similar functions
  • Allow users to apply function metadata in IDA Pro
  • Reduce reverse engineering time

Installation documentation can be found at http://first-server-dev.readthedocs.io

Notes

This version is still being developed, thus this release is from the dev branch. The BasicMaskingEngine does not function the same way as the previous version. A new version will be released once implemented and will be merged to master upon completion.

Change Log

  • Updated OAuth path retrieval
  • Fixed incorrect exception handling in first_core/auth.py
  • Removed BSON usage to prevent additional dependencies