![]() |
|
#4
|
|||
|
|||
|
The subject is not wellcovered by tools, so you could even write yourself one
![]() some materials... https://www.hex-rays.com/products/ida/support/ppt/caro_obfuscation.ppt http://recon.cx/2008/a/eric_d_lapse/Deobfuscator_RECON2008.ppt optimice Deobfuscation plugin for IDA http://code.google.com/p/optimice/ Simple Deobfuscation of Code Transformation http://hooked-on-mnemonics.blogspot.com/2012/10/simple-deobfuscation-of-code.html IDA Plugin deofuscator plugin http://www.openrce.org/forums/posts/1915 Ariadne Deobfuscation Technology (IDA/Olly plugins) http://ariadne.group-ib.ru/en/about or here http://www.woodmann.com/collaborative/tools/index.php/Ariadne Attacking Obfuscated code with Ida Pro http://www.blackhat.com/presentations/bh-usa-04/bh-us-04-eagle.pdf Code doctor plugin has some deobfuscating features http://www.woodmann.com/collaborative/tools/index.php/CodeDoctor lots of cool IDA plugins coudl be found in contests by years https://www.hex-rays.com/contests/index.shtml ...... |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Tiny Obfuscate [C++] | CarrotStickCam | Community Tools | 5 | 11-12-2022 04:17 |
| VB6 N-CODE - Stop any servive and Start any APP-Release and Source Code | wilson bibe | General Discussion | 5 | 04-10-2013 00:23 |
| Code to efficiently break on entering code section??? | yaa | General Discussion | 4 | 05-08-2005 05:29 |