diff --git a/README.md b/README.md index dc5fe01a8..06c8ec4c4 100644 --- a/README.md +++ b/README.md @@ -12,7 +12,7 @@ The Firmware Analysis and Comparison Tool (formerly known as Fraunhofer's Firmware Analysis Framework (FAF)) is intended to automate most of the firmware analysis process. It unpacks arbitrary firmware files and processes several analyses. Additionally, it can compare several images or single files. -Furthermore, Unpacking, analysis and compares are based on plug-ins guaranteeing maximal flexibility and expandability. +Furthermore, Unpacking, analysis and comparisons are based on plug-ins guaranteeing maximal flexibility and expandability. More details and some screenshots can be found on our [project page](https://fkie-cad.github.io/FACT_core/). ## Requirements @@ -21,16 +21,15 @@ FACT is designed as a multiprocess application, the more Cores and RAM, the bett Minimal | Recommended | Software ------- | ----------- | -------- -4 Cores
8GB RAM
10 GB disk space | 16 Cores
64GB RAM
10* GB disk space | git
python 3.6 - 3.9
OS see below +4 Cores
8GB RAM
10 GB disk space | 16 Cores
64GB RAM
10* GB disk space | git
python 3.7 - 3.10
OS see below > ~ 10 GB required to set up FACT code, container and binaries. Additional space is necessary for result storage. That can be on a separate partition or drive. It is possible to install FACT on any Linux distribution, but the installer is limited to -- Ubuntu 18.04, 20.04 (stable) -- Ubuntu 19.04 (experimental) -- Debian 9, 10 (experimental) -- Kali (tested on 2019.3 and 2019.4) (experimental) -- Fedora (tested on 31 and 33) (experimental) +- Ubuntu 18.04 (with Python >3.6) +- Ubuntu 20.04 (stable) +- Debian 10 (stable) +- Kali (experimental) :exclamation: **Caution: FACT is not intended to be used as public internet service. The GUI is not a hardened WEB-application and it may take your server at risk!** @@ -89,6 +88,7 @@ We've been happy to show FACT in a number of BlackHat Arsenal sessions. - [![Black Hat Arsenal](https://github.com/toolswatch/badges/blob/master/arsenal/asia/2018.svg)](http://www.toolswatch.org/2018/01/black-hat-arsenal-asia-2018-great-lineup/) - [![Black Hat Arsenal](https://github.com/toolswatch/badges/blob/master/arsenal/europe/2018.svg)](http://www.toolswatch.org/2018/09/black-hat-arsenal-europe-2018-lineup-announced/) - [![Black Hat Arsenal](https://github.com/toolswatch/badges/blob/master/arsenal/usa/2019.svg)](http://www.toolswatch.org/2019/05/amazing-black-hat-arsenal-usa-2019-lineup-announced/) +- [![Black Hat Arsenal](https://github.com/toolswatch/badges/blob/master/arsenal/europe/2019.svg)](https://www.blackhat.com/eu-19/arsenal/schedule/#fact--firmware-analysis-and-comparison-tool-18179) ### Other diff --git a/src/version.py b/src/version.py index 1d00fb7a4..a0e7c132a 100644 --- a/src/version.py +++ b/src/version.py @@ -16,4 +16,4 @@ along with this program. If not, see . ''' -__VERSION__ = '3.3-dev' +__VERSION__ = '3.3' diff --git a/src/web_interface/templates/about.html b/src/web_interface/templates/about.html index 86699f7f7..607d32b20 100644 --- a/src/web_interface/templates/about.html +++ b/src/web_interface/templates/about.html @@ -54,18 +54,34 @@

Change Log

-

FACT 3.3-dev

+

FACT 3.3 (2022-05-06)

  • New or Improved Analysis
    • New plugin for finding and checking Linux kernel configurations.
      • +
    • New plugin for finding device trees.
      • +
    • New plugin for matching known software from the circ.lu hash library.
      • +
    • New plugin for detecting unintentionally leaked information in firmware.
      • +
    • New plugin for gathering hardware information.
      • +
    • The results of the cve_lookup plugin are now sorted by severity.
      • +
    • Added support for additional ISAs to the architecture detection plugin.
      • +
    • Added ruby and php linters to the source code analysis plugin.
  • Improved loading of analysis tags.
    • +
  • Added support for searching firmware tags to the "basic search".
  • New Swagger documentation for all REST endpoints.
  • Added software signatures.
    • -
  • Added new feature to force single analysis update (will be removed when scheduling problems are fixed).
    • +
  • Added new feature to force single analysis and whole firmware analysis update (will be removed when scheduling problems are fixed).
  • Changed "update analysis" to skip the unpacking step ("re-do analysis" still unpacks).
    • +
  • Improved system monitoring page with live updates.
    • +
  • Improved dependency graph page.
    • +
  • New page for monitoring FACT logs.
    • +
  • New page for browsing previous "binary search" queries.
    • +
  • New hex preview for binary files on the analysis page.
    • +
  • New text file diffing feature.
    • +
  • Added support for Python virtual environments.
    • +
  • Improved CLI user management script.
  • Updated the web framework Flask to version 2.0
    • @@ -76,7 +92,8 @@

      FACT 3.3-dev

    • -
  • Bug fixes.
    • +
  • Improved documentation.
    • +
  • Bug fixes, stability improvements and better error reporting.

FACT 3.2 (2021-05-21)