FACT_core v3.1.2

This is a bug fix release.

Changelog

• fixed bug in lief installation
• switched cwe_checker plugin docker image to stable tag

FACT_core v3.1.1

This is a bug fix release.

Changelog

• fixed bug in cve_lookup plugin installation
• fixed bug in PDF report tests

FACT_core v3.1

Changelog

• New or Improved Analysis
  • New CVE lookup plug-in to match software to known vulnerabilities
  • New plug-in to identify input vectors for executables (e.g. file, network, environment, stdin)
  • New software signatures added
  • Crypto hints plug-in added
  • Warning: Removed Base64 plug-in
• Ubuntu 20.04 (Focal Fossa) support
• Major refactoring of WebUI (Moved from bs3 to bs4)
• Dynamic generation of analysis summary
• Navigation bar restructured
• Added experimental support for multiple Debian and Kali releases as well as Ubuntu 19.04
• Warning: Hex view was removed as planned
• Binary search now supports directly listing parent firmware of matches
• Added endpoint to search for incomplete analyses
• Backend statistics now lists running processes
• Various smaller improvements
• Bug fixes

FACT_core v3.0

❗ Warning: This release has a dependency issue regarding the ip_and_uri_finder plug-in. We recommend to use the current master github branch instead ❗

Change Log

• New or Improved Analysis
  • New "tlsh" analysis plugin for finding similar files accross the database
  • Major refactoring of QEMU plugin (improved stability, more feedback)
  • Added tlsh to file hashes plugin
• Moved unpacking to standalone project, integrated via docker
  • See fact_extractor for added unpack plugins
• Added automatic PDF report generation (stable, template in alpha)
• Added REST endpoint for system monitoring
• Added button to start analysis plugins on single file or firmware objects
• Revised statistics page
• Bug fixes

FACT_core v2.6

Change Log

• New or Improved Analysis
  • Linter plug-in for source code analysis (js, lua, python, sh)
  • Plug-in to test executables for compatibility with QEMU emulation
  • Plug-in for displaying file system metadata information
  • ELF analysis plug-in added
  • CWE-Checker
  • New software signatures added
  • New known vulnerabilities added
• New or Improved Unpacking
  • dahua firmware image unpacker added
  • intel hex unpacker added
  • hp pjl
  • raw
• Changed installation! Path to install.py has changed and installation is now wrapped in python for better overview and failure tracking.
• New INSTALL.md for better documentation of installation options
• Added software components statistics
• Added REST endpoint for binary search (YARA)
• Added unified mime-type-based analysis blacklist feature
• Added syntax highlighting for code preview
• Improved analysis caching
• Bug fixes

FACT_core v2.5

Change Log

• New or Improved Analysis
  • Known vulnerabilities plug-in added
  • IP and URI finder Geo IP support
  • Printable strings: Offsets are shown
  • More software signatures added
• New or Improved Unpacking
  • Debian package unpacking plug-in added
• Radare view allows opening objects in radare2-webui
• Warning: Hex view is deprecated and is going to be removed in 2.6
• Device part meta data support
• Quick download buttons added
• Analysis preset support
• Interim result publishing
• Intercom speedup
• Ubuntu 18.04 support
• YARA backend upgraded
• Warning: Default MongoDB path changed!
• Code clean ups
• Bug fixes

FACT_core v2.4

Change Log

• New or Improved Unpacker
• Xerox
• New or Improved Analysis
  • file header compare plug-in
• Full fledged user authentication system
• Supporting custom routes for plug-ins
• Compare view definition moved to plug-in
• Firmware tagging feature
• Imprint feature
• Improved usability
• Compare speedup
• Acceptance test speedup
• Code clean ups
• Bug fixes

FACT_core v2.3

Change Log

• New or Improved Unpacker
  • SquashFS: AVM support
• New or Improved Analysis
  • Exploit mitigation plug-in
  • Imphash
• Quick search
• Compare result browsing
• Convenient compare trigger on analysis page
• REST: Update analysis without unpacking
• Improved usability
• Code clean ups
• Bug fixes

First Public Release

Change Log

• Base64 Decoder improved
• Enhanced error handling
• REST API improved
• Code clean ups
• Bug fixes