4 ms·

Demovfuscator

• Kristine1975 10y ago
  Previous HN discussions on the movfuscator: https://news.ycombinator.com/item?id=9751312 https://news.ycombinator.com/item?id=9751312 https://news.ycombinator.com/item?id=10021259 https://news.ycombinator.com/item?id=10021259
• Tepix 10y ago
  I wonder how well it can work once you mix different variants of the movfuscator (using xor or load instead of mov etc).
• a_c 10y ago
  From movfuscator's FAQ [1]: Q: Why did you make this? A: I thought it would be funny Is the motivation of demovfuscator to be not funny? [1] https://github.com/xoreaxeaxeax/movfuscator#faq https://github.com/xoreaxeaxeax/movfuscator#faq Edit: Not sure why the down vote. It was intended as a joke, if it means anything
  • Kristine1975 10y ago
    >Not sure why the down vote. It was intended as a joke, if it means anything My guess (I didn't downvote you) is that your post added nothing to the discussion. Joke posts tend to be frowned upon here.
• Gladdyu 10y ago
  For people wondering what movfuscation actually is and how it works: https://www.cl.cam.ac.uk/~sd601/papers/mov.pdf https://www.cl.cam.ac.uk/~sd601/papers/mov.pdf
• uudecode 10y ago
  I know that capstone, keystone and unicorn are marketed to the "security community" but these projects are some of the most promising I've seen for programming in general, e.g., for the few people who still might want to write small, simple (and fast) programs that run on multiple architectures. Great work. (This project relies on keystone and capstone.)