{"id":26996,"library":"flare-floss","title":"flare-floss","description":"FLARE Obfuscated String Solver (FLOSS) is a tool for automatically extracting obfuscated strings from malware, including stacked strings, decoded strings, and statically-analyzed API strings. Current version 3.1.1, released periodically via Mandiant.","status":"active","version":"3.1.1","language":"python","source_language":"en","source_url":"https://www.github.com/mandiant/flare-floss.git","tags":["malware analysis","obfuscated strings","reverse engineering"],"install":[{"cmd":"pip install flare-floss","lang":"bash","label":"PyPI install"}],"dependencies":[],"imports":[{"note":"Floss 3.x uses a flat module structure; older docs may reference nested imports.","wrong":"from floss.floss import main","symbol":"main","correct":"from floss import main"}],"quickstart":{"code":"import json\nfrom floss import main\n\n# Run FLOSS on a binary (example: /bin/ls)\nresult = main.scan_file('/bin/ls')\nprint(json.dumps(result, indent=2, default=str))","lang":"python","description":"Scans a binary with default settings and prints extracted strings as JSON."},"warnings":[{"fix":"Upgrade to 3.x and use the new API (floss.main.scan_file).","message":"FLOSS 3.0 dropped support for vivisect (old static analysis engine). Code using vivisect paths will fail.","severity":"breaking","affected_versions":"<3.0"},{"fix":"Use subprocess to call floss CLI for stable behavior, or pin to a specific floss version.","message":"The CLI is the primary interface; the Python API is not fully documented and may change between minor versions.","severity":"gotcha","affected_versions":">=3.0"}],"env_vars":null,"last_verified":"2026-05-01T00:00:00.000Z","next_check":"2026-07-30T00:00:00.000Z","problems":[{"fix":"Run 'pip install flare-floss' in the correct Python environment.","cause":"Package not installed or installed in wrong environment.","error":"ModuleNotFoundError: No module named 'floss'"},{"fix":"Use 'from floss import main' instead of 'from floss.floss import main'.","cause":"Using incorrect import path; floss 3.x moved the API.","error":"ImportError: cannot import name 'main' from 'floss'"}],"ecosystem":"pypi","meta_description":null,"install_score":null,"install_tag":null,"quickstart_score":null,"quickstart_tag":null}