FIRST Server BETA v0.0.3
The Function Identification and Recover Signature Tool (FIRST) developed by Talos, is an IDA Pro plugin that allows reverse engineers to more quickly complete static analysis. It makes finding similar functions faster and easier by removing the need to synchronize function metadata.
FIRST’s extensible framework allows users to submit function metadata to a repository and search the repository for function metadata similar to the function
Users can contribute function metadata and search for function metadata similar to the function(s) being analyzed in IDA. FIRST’s framework allows developers to create new ways to derive similarities between functions.
- Save function metadata (name, prototype, and comment)
- Provide way to find similar functions
- Allow users to apply function metadata in IDA Pro
- Reduce reverse engineering time
Installation documentation can be found at http://first-server-dev.readthedocs.io
Notes
This version is still being developed, thus this release is from the dev branch. The BasicMaskingEngine
does not function the same way as the previous version. A new version will be released once implemented and will be merged to master upon completion.
Change Log
- Updated OAuth path retrieval
- Fixed incorrect exception handling in
first_core/auth.py
- Removed BSON usage to prevent additional dependencies