Open Source License scanning for Binary files

[kiranravindran90]

We installed BANG successfully and able to unpack binary files (.bin-flashwares).

But we are not able to locate result files for Open Source License scanning.
We see "LicenseIdentifierScanner.py" file in \src but not sure if it is called during unpacking or has to be called separately?

[armijnhemel]

BANG is split into two parts: unpacking and analysis. These two are separate. Currently the analysis part is under development and you should consider BANG as an unpacker for now. I will be merging the first analysis tools in about a month.

[kiranravindran90]

Thanks for this info. Any update on the analysis part?

[armijnhemel]

Thanks for this info. Any update on the analysis part?

There are a few analysis tools, but they are far from complete yet. See the file README-analysis.md in the top level directory to see what is there right now. More will be added soon: an identification mechanism based on Yara is currently in the works.

[kiranravindran90]

Oh ok. Thank you. I am specifically looking for Open source License scan. Any idea when that part would be available? A rough estimate should be more than enough, just to know how long to wait :)

[armijnhemel]

Oh ok. Thank you. I am specifically looking for Open source License scan. Any idea when that part would be available? A rough estimate should be more than enough, just to know how long to wait :)

It depends on what you think by "open source license scan". Could you clarify your use case?

[kiranravindran90]

Well what I meant by that is - able to scan the Binary files for presence of any Open Source licenses like GPL, Apache etc.
Could be based on checking for License text in the Binary or so.

[armijnhemel]

Well what I meant by that is - able to scan the Binary files for presence of any Open Source licenses like GPL, Apache etc. Could be based on checking for License text in the Binary or so.

This is actually not that difficult (quite trivial actually using a few YARA rules), but you should be aware that very few binaries actually incorporate license information.

[kiranravindran90]

Thank you for the suggestion & quick response. I shall check on that. Is there a plan to implement such a feature in BANG?

[armijnhemel]

Thank you for the suggestion & quick response. I shall check on that. Is there a plan to implement such a feature in BANG?

Yes. As a matter of fact, I am working on a first version of YARA integration as we speak and that should be in BANG this week. Let me see what I can do :-)

[kiranravindran90]

Oh that's good. Thanks a lot :)

[armijnhemel]

I have added some rules in the directory maintenance/yara_rules. You can compile these to YARA rules and then use YARA. I will soon write scripts that will be able to process output from BANG and use these rules as well.

[kiranravindran90]

Hello :) Are these scripts ready & available now? i.e. We can unpack Binaries & scan for Open source license information?