{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/3"},{"label":"Disassemblers","url":"https://skillfed.io/packages/category/software-development-disassemblers"}],"enrichment":{"capability":"Parse, compile, and match FLIRT signatures (Fast Library Identification and Recognition Technology) against byte sequences to recognize statically-linked code without IDA Pro.","skillfed_tags":["binary-analysis","reverse-engineering","pattern-matching"],"use_cases":["Recognize statically-linked library functions in PE or other binary formats for malware analysis or reverse engineering","Identify common C/C++ runtime library routines in compiled binaries to reduce manual analysis effort","Integrate FLIRT matching into binary analysis tools or frameworks without requiring IDA Pro","Build signature-based function identification into automated security scanning or code reuse detection pipelines","Parse and validate FLIRT signature files (.pat, .sig) for custom binary analysis workflows"],"what_it_does":"python-flirt is a Python binding to the Rust-based lancelot-flirt library, enabling FLIRT signature parsing, compilation, and matching without IDA Pro. FLIRT signatures are binary patterns used to identify statically-linked library functions in compiled code; this library reverse-engineers the matching engine and provides both .sig (compiled binary) and .pat (ASCII text) file format support.\n\nThe library works by parsing signature definitions into an intermediate representation, compiling them into a matcher, and then matching those patterns against raw byte sequences to identify recognized functions. It supports recursive matching via \"references\" for disambiguating functions with identical byte patterns, though client code must coordinate the recursive invocation. Zero runtime dependencies and prebuilt wheels for modern Python versions on major platforms make installation straightforward.","worth_installing":"Yes, if you need FLIRT signature matching in Python without IDA Pro. The library is actively maintained, has no known vulnerabilities, carries a permissive license, and offers prebuilt wheels for modern Python versions. Install friction is moderate but manageable. Main consideration: recursive reference matching requires manual coordination in your code\u2014review the lancelot implementation before integrating."},"id":"python-flirt","links":{"html":"https://skillfed.io/packages/python-flirt","md":"https://skillfed.io/packages/python-flirt.md","pypi":"https://pypi.org/project/python-flirt/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-07-09","license_spdx":null,"license_treatment":"permissive","name":"python-flirt","python_support":"supports_current","summary":"A Python library for parsing, compiling, and matching Fast Library Identification and Recognition Technology (FLIRT) signatures."},"popularity":{"monthly_downloads":104075,"position":12771,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.10.0"}