FLOSS
FLOSS: An open-source command-line tool for recovering obfuscated strings during malware analysis. Ranked #68 of 72 in Reverse Engineering Tools by our editors (3.0/10); pricing: Free plan; best for malware analysts examining obfuscated strings.
At a glance
- Editor score3.0 / 10
- PricingFree plan
- Best forMalware analysts examining obfuscated strings
- Free planYes
- Paid fromFree
- DecompilerNo
- Facts checked23 Sep 2026
Where it wins
- Recovers strings that ordinary extraction may not reveal
- Focused on malware-binary string analysis
- Open-source command-line tool hosted by Mandiant
Where it doesn't
- Narrowly focused on string extraction rather than broad reverse engineering
- Command-line workflow may not suit buyers seeking a graphical interface
- Does not include a decompiler
Our verdict on FLOSS
FLOSS, short for FireEye Labs Obfuscated String Solver, is an open-source command-line tool for analyzing malware binaries. It is aimed at security researchers and malware analysts who need to recover strings that may be hidden by obfuscation and who can use the results as part of static malware analysis. Its role is specific: it addresses a string-extraction task, not the full range of reverse-engineering work.
The published project information presents FLOSS as an open-source tool, so its described access model is distinct from a tiered commercial product. Its central capability is recovering strings that ordinary string extraction may not reveal, including strings obfuscated in malware code. That makes it a practical auxiliary for analysts investigating binaries where readable strings alone do not provide enough context. The project is hosted by Mandiant on GitHub.
FLOSS is best suited to workflows that already include malware analysis and can accommodate a command-line utility. Its narrow purpose is also its main boundary: it is not a general reverse-engineering suite, and it does not provide a decompiler. Buyers seeking a broader environment for inspecting and understanding binaries should look for a tool with those wider capabilities; analysts who specifically need help extracting obfuscated strings can consider FLOSS as a focused addition to their workflow.
Your product? Our editors can test FLOSS in depth and publish a review, labelled as paid · from $149/mo →
FLOSS pricing
FLOSS fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Decompiler | No |
| Firmware analysis | Not verified |
| Analysis mode | Hybrid |
| Plugin API | Not verified |
| Supported platforms | Not verified |
| Supported architectures | Not verified |
| Built for | Solo, Small business, Mid-market, Enterprise (editorial estimate) |
| Pricing | Free plan |
| Website | github.com |
| Facts checked | 23 Sep 2026 |
Alternatives to FLOSS
- GhidraA broad, free toolkit for native-code and bytecode reverse engineering.9.4
- IDA ProA comprehensive native reverse-engineering suite with substantial annual licensing costs.9.2
- ImHexA desktop binary inspection workbench with editing, patterns, comparison, and disassembly.8.7
Used FLOSS? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used FLOSS for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
FLOSS is listed in our Reverse Engineering Tools directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/floss/"><img src="https://www.itechguides.com/best/badge/floss.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update