Click any tag below to further narrow down your results
Links
GoStringUngarbler is a Python tool that extracts and deobfuscates strings from Go binaries obfuscated with the Garble tool. It requires specific flags during compilation and supports Windows and Linux binaries. The program works by patching decryption routines to reveal the original strings.
A Python tool has been developed to deobfuscate control flow flattening applied by OLLVM, using the Miasm framework to recover the original control flow of obfuscated functions. It reconstructs the control flow, generates deobfuscated binaries, and supports multi-layered function deobfuscation for both Windows and Linux binaries. The tool is inspired by previous works and utilizes symbolic execution for effective analysis.