obfuscation

mono --aot with MinGW: unknown pseudo-op: `.local'

为君一笑 提交于 2019-12-08 05:33:49
问题 Can I user mono's AOT feature to natively "pre-compile" .NET DLLs (and or EXEs) to make them harder to reverse engineer? If so, how do I get mono/AOT working in Windows 7? (I'm running x64 but the app is targeting x86 explicitly.) I just installed Mono 2.6.3 and MinGW 5.1.6 and I'm trying to AOT compile an exe (or a dll, it doesn't matter). I get screens and screens of error messages: C:\Users\jupdike\AppData\Local\Temp\mono_aot_XSDEAV:533: Error: junk at end of line, first unrecognized

Can proguard obfuscate raw filenames

隐身守侯 提交于 2019-12-08 04:57:17
问题 If you unzip an apk file you'll find that all the res files are on display. This can cause a vulnerability. Is it possible to get the proguard tool to obfuscate the filenames in order to hide their purpose? 回答1: ProGuard can handle resources files in the following ways: Rename them to follow obfuscated names of corresponding class files (-adaptresourcefilenames), Update obfuscated class names in text files (-adaptresourcefilecontents), Otherwise, just copy them. ProGuard doesn't change file

Operators and quote precedence in obfuscated cmd

混江龙づ霸主 提交于 2019-12-08 04:17:55
问题 Im having trouble understanding how this will evaluate, it comes from a piece of malware I'm dissecting, so beware. I've removed the ascii giberish and the integers in the foor loop which is likely to have the malicious instructions. So it should be fine, I can provide it if need be. If i strip down the code the most my basic understanding allows, it is trying to pass this: cmd.exe /c CmD /V/C"set foo=ASCIIgibberish bazz=moreASCIIgibberish&&for %f in (BunchOfIntegers)do set bar=!bar!!foo:~%f

How to keep Google Maps in obfuscation?

别来无恙 提交于 2019-12-08 04:03:44
问题 I have implemented Google Maps (Google API) in my application. So I added ProGuard file inside my application. After adding the Proguard file, the map is not opening, and showing a white blank screen. This is my Proguard code: -keep class * implements com.google.android.gms.maps { *; } -keep class com.google.android.gms.maps.** { *; } -keep interface com.google.android.gms.maps.** { *; } I have tried this, but it's not working. 回答1: The Google Maps API uses some other stuff as well which can

Dynamic obfuscation by self-modifying code

我是研究僧i 提交于 2019-12-07 23:12:09
问题 Here what's i am trying to do: assume you have two fonction void f1(int *v) { *v = 55; } void f2(int *v) { *v = 44; } char *template; template = allocExecutablePages(...); char *allocExecutablePages (int pages) { template = (char *) valloc (getpagesize () * pages); if (mprotect (template, getpagesize (), PROT_READ|PROT_EXEC|PROT_WRITE) == -1) { perror (“mprotect”); } } I would like to do a comparison between f1 and f2 (so tell what is identical and what is not) (so get the assembly lines of

How can I obfuscate Java source code for external GWT development?

别等时光非礼了梦想. 提交于 2019-12-07 22:45:01
问题 Most obfuscation focuses on bytecode. I have to supply the source code too as that is what a GWT compiler an external developer would use needs to run. Before releasing the source code I need to clean it up a bit: Obfuscate method variable names Obfuscate private method argument names Remove all non-Javadoc comments except for the licence at the top of each file. Remove all Javadoc comments on private methods or protected methods of final classes. Remove certain Javadoc tags such as @author

What are features of using Proguard in project with Protocol Buffers?

风流意气都作罢 提交于 2019-12-07 16:26:50
问题 I have a project in where Google Protocol Buffers are used. Once I try to obfuscate it with ProGuard it seems that protobuf causes problem. All my own classes I package into mybuildedclasses.jar . Google code is packaged into protbuf.jar mybuildedclasses.jar protobuf.jar other external jars After that I am trying to obfuscate mybuildedclasses.jar . Config file is similar to this one. Eventually all jars are packaged inside another fat jar. I run the program and once message is tried to be

Find a obfuscation tool for android package built from Unity 4.* [closed]

佐手、 提交于 2019-12-07 14:18:18
问题 Closed. This question is off-topic. It is not currently accepting answers. Want to improve this question? Update the question so it's on-topic for Stack Overflow. Closed 2 years ago . I have done a game used Unity engine, written in C#, now I want to publish a Android version to Google play . But currently, I know many games might be hacked if we don't obfuscate the code. I checked this many times, but not successful yet. Does anyone know any another tool support this? Thank you 回答1: You can

How secure is it to store an encryption key in source code?

青春壹個敷衍的年華 提交于 2019-12-07 08:27:23
问题 Is this encryption class sufficiently secure? Or can someone disassemble my binary to find the key and IV? I'm using it to decrpyt license files so it's quite important that it can't be easily broken. internal static class Encryptor { // Actual values are put here in my source private static readonly byte[] Key = { 0, 0, 0, 0, 0, 0, 0, 0 }; private static readonly byte[] Iv = { 0, 0, 0, 0, 0, 0, 0, 0 }; internal static String Encrypt(string source) { var des = new DESCryptoServiceProvider();

Should HASP Vendor Code be encrypted/obfuscated?

你。 提交于 2019-12-07 07:54:51
问题 This is in regard to SafeNet/Aladdin Sentinel HASP keys. I've posted to their site but just in case anybody else knows the answer or would find the answer useful I'm posting here too. According to the docs provided by SafeNet in "Software Protection and Licensing Guid.pdf" we are supposed to keep our Vendor Code secret, right? Well, if I build the sample provided in "\Samples\Runtime\csharp\", then protect the app with Envelope, then decompile the Enveloped app in JetBrains dotPeek, I can see