flare-vm

FLARE-VM FLARE-VM へようこそ。これは Windows システム向けのソフトウェアインストールスクリプト集で、仮想マシン VM 上にリバースエンジニアリング環境を簡単にセットアップ・保守できるようにするものです。FLARE-VM は、リバースエンジニアリングツールのキュレーション問題を解決するために設計されており、2つの主要なテクノロジーに依存しています: Chocolatey と Boxstarter。Chocolatey は Windows ベースの Nuget パッケージ管理システムで、「パッケージ」とは基本的に、特定のツールをダウンロードして構成する...

windows-malware-behavioral-analysis

Análisis de comportamiento de malware con REMnux y FLARE-VM Una investigación práctica de malware para el equipo azul que demuestra cómo se pueden analizar ejecutables sospechosos de Windows de forma segura dentro de un laboratorio aislado mediante técnicas de análisis de comportamiento. En lugar...

Exploit for Path Traversal in Microsoft

Exploiting Follina CVE and CVE-2021-40444 Vulnerabilities...

Open Sourcing StringSifter

Malware analysts routinely use the Strings program during static analysis in order to inspect a binary's printable characters. However, identifying relevant strings by hand is time consuming and prone to human error. Larger binaries produce upwards of thousands of strings that can quickly evoke...

FLARE VM Update

FLARE VM is the first of its kind reverse engineering and malware analysis distribution on Windows platform. Since its introduction in July 2017, FLARE VM has been continuously trusted and used by many reverse engineers, malware analysts, and security researchers as their go-to environment for...

The Windows Malware Analysis Distribution: flare-vm

FLARE VM is a freely available and open sourced Windows-based security distribution designed for reverse engineers, malware analysts, incident responders, forensicators, and penetration testers. Inspired by open-source Linux-based security distributions like Kali Linux, REMnux and others, FLARE V...

FLARE VM: The Windows Malware Analysis Distribution You’ve Always Needed!

As a reverse engineer on the FLARE Team I rely on a customized Virtual Machine VM to perform malware analysis. The Virtual Machine is a Windows installation with numerous tweaks and tools to aid my analysis. Unfortunately trying to maintain a custom VM like this is very laborious: tools frequentl...

FLARE VM: The Windows Malware Analysis Distribution You’ve Always Needed!

UPDATE 2 Nov. 14, 2018: FLARE VM now has a new installation, upgrade, and uninstallation process, and also includes many new tools such as IDA 7.0, radare and YARA. UPDATE April 26, 2018: The web installer method to deploy FLARE VM is now deprecated. Please refer to the README on the FLARE VM...