3 ms·

Has anyone found attempts to deobfuscate the coinhive source code? Maybe my google-fu needs improvement... I found a github page that provides a proxy to the c

Has anyone found attempts to deobfuscate the coinhive source code? Maybe my google-fu needs improvement... I found a github page that provides a proxy to the coinhive allowing the user to keep 100% of the profit, but it doesn't even link to the coinhive code that I could see. (https://github.com/cazala/coin-hive-stratum https://github.com/cazala/coin-hive-stratum) Also found this, https://jonathanmh.com/testing-coin-hive-crowd-source-monero-mining/ https://jonathanmh.com/testing-coin-hive-crowd-source-monero.... Interesting but no source code.

hopfog 9y ago
The actual miner is using WebAssembly so I don't know if it's even possible to deobfuscate in a sensible manner.
- berkes 9y ago
  I've tried to reverse engineer it, but failed. The best place to start, IMO, is the communication between client-server over a websocket. It is binary, but shows some interesting data and keys as in key-names, from key-value, not crypto-keys). My idea was to make an API-rate limiter, where a client has to submit a list of calculated hashes (PoW) with each request and so protect the API against bots, scrapers and other (D)DoS attacks. Bad idea, because the data that has to be transfered (in Headers) is going to huge, megabytes, if you want to make even a few cents on a million-hits-per-day API.
beiller 9y ago
I have a branch of https://github.com/tpruvot/cpuminer-multi https://github.com/tpruvot/cpuminer-multi, which I am working on tidying up and pushing to Github. It has a bash script that instead of GCC / Clang, compiles to WASM. Any Clang compilable software can compile to WASM theoretically. Only supports cryptonight hashing at the moment.