The Poor Man's Obfuscator
Key | Action |
---|---|
K or space | Play / Pause |
M | Mute / Unmute |
C | Select next subtitles |
A | Select next audio track |
V | Show slide in full page or toggle automatic source change |
left arrow | Seek 5s backward |
right arrow | Seek 5s forward |
shift + left arrow or J | Seek 10s backward |
shift + right arrow or L | Seek 10s forward |
control + left arrow | Seek 60s backward |
control + right arrow | Seek 60s forward |
shift + down arrow | Decrease volume |
shift + up arrow | Increase volume |
shift + comma | Decrease playback rate |
shift + dot or shift + semicolon | Increase playback rate |
end | Seek to end |
beginning | Seek to beginning |
Share this media
HLS video stream
You can use an external player to play this stream (like VLC).
HLS video streamInformation on this media
Links:
Number of views:
91 (this month: 3)Creation date:
July 5, 2022Speakers:
Romain ThomasLicense:
CC BY-SA v4Description
to prevent static analysis tools (like IDA, BinaryNinja, ...) from working correctly.
While these tricks do not break the execution of the original binary, when they are opened in IDA, BinaryNinja and, Radare2
the code looks obfuscated while only the file format is modified (not the instructions)
These modifications are leveraged by LIEF and the scripts will be published at the end
of the conference with an associated blog post.
Romain Thomas is a security engineer working on mobile applications and obfuscated code.
Author of LIEF, a library to parse and manipulate executable file formats (ELF, PE, Mach-O),
he enjoys going back and forth between reverse engineering and tool development to see which part of the process can be automated.
Romain is also interested in iOS, whitebox cryptography and reverse engineering app protocols.
He contributed in the past to the Triton project, especially on de-obfuscation based on symbolic execution.
Other media in the channel "2022"
19 views, 1 this monthClosingJuly 6th, 2022
45 views, 1 this monthkdigger: A Context Discovery Tool for Kubernetes Penetration TestingJuly 6th, 2022
38 views, 1 this monthDissecting NTLM EPA & building a MitM proxyJuly 6th, 2022
55 views, 1 this monthFinding Java deserialization gadgets with CodeQLJuly 6th, 2022
74 views, 2 this monthMobSF for penetration testersJuly 6th, 2022
72 views, 1 this monthImprove your Malware Recipes with CyberchefJuly 6th, 2022