Questions tagged [deobfuscation]
Techniques to remove obfuscation from a piece of program.
13
questions
72
votes
9
answers
81k
views
Analyzing highly obfuscated JavaScript
I was recently analyzing a web page that contained some highly obfuscated JavaScript - it's clear that the author had went through quite a bit of effort to make it as hard to understand as possible. I'...
- 913
86
votes
9
answers
271k
views
How do I reverse engineer .so files found in android APKs?
I know how to reverse engineer normal android APKs using tools like APK-tool anddex2jar but i don't know how to work with obfuscation. Can anyone help or atleast provide some pointers? I know this ...
- 1,135
11
votes
3
answers
6k
views
What are the available libraries to statically modify ELF executables?
I would like to be able to rewrite or reorganize an ELF binary program directly from the executable format (not at compile-time).
The only library I know to do this is elfesteem (used in Miasm). But,...
- 18.1k
59
votes
7
answers
126k
views
What is a good Java decompiler and deobfuscator?
I am using JD-GUI to decompile Java JAR files, but the problem is that it leaves many errors, such as duplicate variables which I have to fix myself and check to see if the program still works (if I ...
10
votes
4
answers
23k
views
Try to deobfuscate multi layered javascript
According to the techy zilla blog
It will be much harder to deobfuscate code that has been obfuscated using multiple obfuscating algorithms. According to them, jsbeautifier can't fix this obfuscated ...
- 201
16
votes
1
answer
117k
views
How to deobfuscate an obfuscated javascript file like this? [duplicate]
I'm having serious problems deobfuscating a JavaScript file at work. This file is inside a web app that I was left in charge to improve it. The problem is that I can do it without having access to ...
- 169
6
votes
1
answer
686
views
Recompiling/optimizing redundant code to make analysis easier
I'm analyzing an application created with Borland Delphi but the poor quality of the object code makes analysis difficult and tedious. The code is so convoluted and inflated with superfluous ...
- 439
2
votes
1
answer
2k
views
Any good deobfuscators for java?
So I've built an obfuscator for java source code, would anyone know if there is any good deobfuscators which i could test how well my obfuscator is?
I know there are many deobfuscators out there, ...
- 31
3
votes
1
answer
7k
views
5
votes
1
answer
2k
views
IDA PRO Hex-Rays 1.5 pseudo code understanding -=0x3FFFFFFFu; += 0x3FFFFFFFu;
I'm trying to clean up the pseudo code to make it compile and function similar if not exactly the same as the original code.
This bit which looks like this appears in various places I'm trying to ...
- 729
3
votes
0
answers
639
views
How to use Ghidra to work with VM obfuscated binaries?
By "VM obfuscated binary", I mean a binary that contains one or more implementations of a VM internally, and also some bytecode that can run on this VM. One of the reasons why this binary is this way, ...
- 446
1
vote
0
answers
2k
views
How to detect obfuscator (de4dot shows: Detected unknown obfuscator)
Generally, I use de4dot to detect obfuscator or deobfuscate. But some files are protected as they show:
Detected unknown obfuscator
What are ways to detect the obfuscator of .exe?
- 613
0
votes
1
answer
4k
views
How decrypt hexadecimal javascript code? [closed]
Someone here already had success to deobfuscate 100% a "hexadecimal" Javascript code?
E.g.:
var _0x22bc92 = function() {
var _0x26938d = !![];
return function(_0x100751, _0x54d399) {
...
- 111