Questions tagged [deobfuscation]
Techniques to remove obfuscation from a piece of program.
11
questions
68
votes
9answers
64k views
Analyzing highly obfuscated JavaScript
I was recently analyzing a web page that contained some highly obfuscated JavaScript - it's clear that the author had went through quite a bit of effort to make it as hard to understand as possible. I'...
10
votes
2answers
4k views
What are the available libraries to statically modify ELF executables?
I would like to be able to rewrite or reorganize an ELF binary program directly from the executable format (not at compile-time).
The only library I know to do this is elfesteem (used in Miasm). But,...
10
votes
4answers
20k views
Try to deobfuscate multi layered javascript
According to the techy zilla blog
It will be much harder to deobfuscate code that has been obfuscated using multiple obfuscating algorithms. According to them, jsbeautifier can't fix this obfuscated ...
6
votes
1answer
571 views
Recompiling/optimizing redundant code to make analysis easier
I'm analyzing an application created with Borland Delphi but the poor quality of the object code makes analysis difficult and tedious. The code is so convoluted and inflated with superfluous ...
2
votes
1answer
1k views
Any good deobfuscators for java?
So I've built an obfuscator for java source code, would anyone know if there is any good deobfuscators which i could test how well my obfuscator is?
I know there are many deobfuscators out there, ...
60
votes
8answers
177k views
How do I reverse engineer .so files found in android APKs?
I know how to reverse engineer normal android APKs using tools like APK-tool anddex2jar but i don't know how to work with obfuscation. Can anyone help or atleast provide some pointers? I know this ...
12
votes
1answer
90k views
How to deobfuscate an obfuscated javascript file like this? [duplicate]
I'm having serious problems deobfuscating a JavaScript file at work. This file is inside a web app that I was left in charge to improve it. The problem is that I can do it without having access to ...
3
votes
1answer
5k views
5
votes
1answer
2k views
IDA PRO Hex-Rays 1.5 pseudo code understanding -=0x3FFFFFFFu; += 0x3FFFFFFFu;
I'm trying to clean up the pseudo code to make it compile and function similar if not exactly the same as the original code.
This bit which looks like this appears in various places I'm trying to ...
0
votes
0answers
558 views
How to detect obfuscator (de4dot shows: Detected unknown obfuscator)
Generally, I use de4dot to detect obfuscator or deobfuscate. But some files are protected as they show:
Detected unknown obfuscator
What are ways to detect the obfuscator of .exe?
-1
votes
1answer
1k views
How decrypt hexadecimal javascript code? [closed]
Someone here already had success to deobfuscate 100% a "hexadecimal" Javascript code?
E.g.:
var _0x22bc92 = function() {
var _0x26938d = !![];
return function(_0x100751, _0x54d399) {
...
