This version introduces a brand new documentation and some uniformization to help future mapper development.
All:
- A new documentation
File system parser:
- Deactivate lief logging to reduce "noise".
Docker/CI:
- Add template for future mapper.
Full Changelog: https://github.com/quarkslab/pyrrha/compare/v0.4.1...v0.4.2
This version enforces the usage of a more efficient version of numbat and fixes some little bugs.
All:
- enforce numbat >= 0.2 to increase analysis speed
File system parser:
- check db existence with the appropriate numbat method
- remove error-prone path modifications in symlink resolution
Full Changelog: https://github.com/quarkslab/pyrrha/compare/v0.4.0...v0.4.1
This version introduces the usage of Numbat, our home-made Sourcetrail SDK fully Pythonic. Thanks to it, pyrrha
is much easier to install.
All:
- Remove SourcetrailDB dependency to use
numbat
library
File system parser:
- multiprocess binary parsing (lief export)
Docker/CI:
- Adapt to numbat dependency. Remove all the useless installations.
- Add package publication on pypi.
- Package name was changes into
pyrrha-mapper
as thepyrrha
package already exists on Pypi.
- Symlink resolution was partially broken due to not extensive checks on the path. It was trying to parse directory for example.
This release contains a CI that automatically upload the package on Pypi. You can now install Pyrrha by doing
pip install pyrrha-mapper
Full Changelog: https://github.com/quarkslab/pyrrha/compare/v0.3.0...v0.4.0
Version release at the occasion of the talk Pyrrha: navigate easily into your system binaries given at the CTI-summit of Hack.lu.
Full Changelog: https://github.com/quarkslab/pyrrha/compare/v0.2.0...v0.3.0
File system parser:
- change JSON export structure
Documentation:
- add example of diffing using JSON export
- extend README to include new features
Docker/CI:
- Change base Docker image to a lighter one (
python
topython-slim
) - Add automatic build and upload of Docker image on Quarkslab's Github registry
None
Install from command line:
docker pull ghcr.io/quarkslab/pyrrha:v0.3.0
Use as base image in Dockerfile:
FROM ghcr.io/quarkslab/pyrrha:v0.3.0
For more details, check associated package page.
CLI:
- setup logging and add debug option
- add
-h
option to show the usage (equivalent of--help
)
File system parser:
- add PE support (:warning: it is case sensitive for all imports (functions and libraries)
- add progress bar to show in real time percentage of wiles which have been indexed
- unresolved imports (lib and/or symbols) point now on non-indexed symbols to keep information in the database
- the mapping done by Pyrrha can be exported as a JSON file
Doc:
- add options to have real time Docker output in the terminal (for logs and progress bars)
- Dockerfile was copying non existing directory, this action has been removed.
First public release of Pyrrha