Locked Obfuscation Detection v2.0 - Pinpoint obfuscated code

[itsMe]

This is the hidden content, please

• Sign In
• or
• Sign Up

Automatically detect control-flow flattening and other state machines

Scripts and binaries to automatically detect control-flow flattening and other state machines in binaries.

Changelog v2.0

Major version update. Additional to code detection heuristics, this release introduces so-called Util functions, helpers which provide additional information to guide reverse engineering or pinpoint functions using a much narrower scope than heuristics. The first three Util functions are

    entry function detection: lists all functions which are not called from other functions
    leaf function detection: lists all function which do not call other functions
    entropy analysis: computes the entropy for each section and allows to identify packed/encrypted code

This is the hidden content, please

• Sign In
• or
• Sign Up