blog
rusty-jsyc
| blog | rusty-jsyc | |
|---|---|---|
| 1 | 2 | |
| 28 | 163 | |
| - | - | |
| 7.4 | 0.0 | |
| 21 days ago | 12 months ago | |
| MDX | Rust | |
| - | GNU Lesser General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
blog
-
Reverse Engineering TikTok's VM Obfuscation (Part 1)
We're sharing the same fate apparently! Just added a PR to their repository to add some feeds, hope it gets merged soon.
https://github.com/nullpt-rs/blog/pull/1
rusty-jsyc
- Reverse Engineering TikTok's VM Obfuscation (Part 2)
-
Reverse Engineering TikTok's VM Obfuscation (Part 1)
Based on my previous research into this, the magic keywords to find this kind of thing on Google are "virtualization obfuscation" or "VM obfuscation".
rusty-jsyc is the main open source implementation I've found, though it hasn't been touched in a few years: https://jwillbold.com/posts/obfuscation/2019-06-16-the-secre... (GitHub: https://github.com/jwillbold/rusty-jsyc)
I think there are other implementations, but they're proprietary so I didn't look into them very much. There are lots of posts out there about reversing virtualization obfuscation, but not many about implementing it. Seems like most people who put the effort into implementing it tend to prefer selling it commercially (which I suppose makes sense).
What are some alternatives?
javascript-obfuscator - A powerful obfuscator for JavaScript and Node.js
pocket - Mixed Boolean Arithmetic Expression Obfuscator
ezkl - ezkl is an engine for doing inference for deep learning models and other computational graphs in a zk-snark (ZKML). Use it from Python, Javascript, or the command line.
youtube-dl - Command-line program to download videos from YouTube.com and other video sites
fingerprintjs - Browser fingerprinting library. Accuracy of this version is 40-60%, accuracy of the commercial Fingerprint Identification is 99.5%. V4 of this library is BSL licensed.
shape-security-decompiler-toolkit - Full dynamic tool kit that is capable of deobfuscating and decompiling shape security's virtual machine obfuscation
javascript-obfuscat
warbirdvm - An analysis of the Warbird virtual-machine protection for the CI!g_pStore
jsvm - Custom virtual machine in javascript for obfuscation purposes