FLARE

Recover Struct Field Tags and Interface Method Names in GoReSym

This project adds two missing features: struct field tag extraction and interface method name recovery. Tags like json:"user_id" tell a reverse...

XRefer Backend Expansion Updated Proposal Raj Mehta GSOC2026

XRefer is a binary analysis tool built by Mandiant FLARE that uses cross-reference correlation, capa integration, and LLM-powered cluster analysis to...

Capa - Native Script Analysis Support

This project involves working with Capa, a tool which detects capabilities in executable files. The rationale behind the project is that, current...

Extend FLOSS to use the rendering techniques pioneered by QUANTUMSTRAND

This project enhances FLOSS by integrating QUANTUMSTRAND’s context-aware rendering to make malware string analysis faster and more actionable....

2025

2 projects

Multi-Backend Abstraction Layer with Binary Ninja/Ghidra Support

Xrefer currently functions as an IDA plugin for static binary feature extraction. The goal of this project is to abstract Xrefer’s core functionality...

capa: add Frida dynamic analysis for Android

This project extends capa, FLARE's open-source capability detection tool, with Android dynamic analysis using Frida instrumentation. The...

2024

1 project

capa: introduce capa explorer for web

The project aims to introduce capa explorer web for capa, a reverse engineering tool developed by Mandiant's FLARE team. Capa automates the process...

2023

4 projects

Extracting Language and Runtime-Specific Strings in Go, Rust, and Beyond

The FLOSS: Language Specific Strings project aims to enhance the FLARE tool called FLOSS, which is used to deobfuscate protected strings found in...

FakeNet-NG: Implementing an Interactive Graphical Summary of NBIs

FakeNet-NG is a tool that is used to simulate the internet which is useful in malware analysis. Currently, FakeNet-NG displays its output by either...

CAPA: Ghidra Integration

CAPA is the FLARE team’s open-source tool to identify program capabilities using an extensible rule set. Each rule is matched against features that...

capa: Capabilities from Dynamic Analysis

capa is an open-source tool that identifies program capabilities using an extensible rule set. Currently, the project relies purely on static...