Click any tag below to further narrow down your results
Links
This article discusses a proof-of-concept for sleep obfuscation on Linux using sigreturn-oriented programming (SROP). It focuses on encrypting PT_LOAD segments and the heap to enhance security. The approach aims to protect processes from certain types of attacks.
This article discusses methods for evading Endpoint Detection and Response (EDR) systems using LLVM's obfuscation techniques. It explores both traditional post-compilation evasion strategies and a newer compile-time obfuscation approach that complicates reverse engineering. The piece highlights the current challenges in effective evasion despite these advancements.
The article explores how minification of JavaScript doesn't provide real security, as it only makes code harder to read. It discusses using large language models and abstract syntax trees to quickly analyze minified code, revealing sensitive information that could be exploited. The author advises developers to rethink how they handle sensitive code in frontend applications.
Hypnus is a Rust library designed for execution obfuscation, protecting memory regions during inactivity by utilizing advanced techniques like thread pool timers and call stack spoofing. It supports both #[no_std] environments and optional heap obfuscation, enabling stealthy execution without thread duplication. Users can easily integrate Hypnus into their projects and leverage its macros for memory encryption and obfuscation during sleep cycles.
Ebyte-Go-Morpher is a Go program that obfuscates Go source code by manipulating the Abstract Syntax Tree (AST) to enhance security. It offers various obfuscation techniques, including string encryption, identifier renaming, and number obfuscation, while preserving reflection compatibility and allowing configuration of features. The tool generates obfuscated files and runtime decryption logic, streamlining the process of protecting Go code.
Pyarmor is a command-line tool for obfuscating Python scripts, enabling features like binding scripts to specific machines and setting expiration dates. It offers various obfuscation methods, including function conversion to C for enhanced security, and supports multiple platforms such as Windows, Linux, and macOS. Users can install it via pip and find additional resources in its documentation and support systems.