Defeating AuraStealer: Practical Deobfuscation Workflows for Modern Infostealers: https://www.gendigital.com/blog/insights/research/defeating-aurastealer-obfuscation

#infostealer #analysis #deobfuscation

🚨 Ever tangled with virtual machine-based code protection? 🚨

In 2020, I wrote a virtual machine deobfuscator for a crack me challenge. I've learned a lot doing that challenge and wrote a 2-part series for it:

https://malwareandstuff.com/taming-virtual-machine-based-code-protection-1/

https://malwareandstuff.com/taming-virtual-machine-based-code-protection-2/

🔍 #ReverseEngineering #MalwareAnalysis #windows #idapro #deobfuscation

My new post about #malware #deobfuscation - https://cert.pl/en/posts/2025/04/peephole-deobfuscation/. I focus on the simple - but powerful - technique of local substitutions. Uses #ghidra and ghidralib.

💣 Full write-up for "Tales for the Brave" - this year's Hard forensics challenge from Hack The Box Cyber Apocalypse CTF - Tales From Eldoria.

🔸 Code #deobfuscation
🔸 hashtag#Telegram data exfiltration
🔸 Malware behavioral analysis

🔗 https://blog.cyberethical.me/htb-ctf-2025-forensics-tales-for-the-brave

#CyberEthical #CyberApocalypse25 #HackTheBox #forensics #EthicalHacking #blueteaming #itsec #dataexfiltration #malware

🎩 Oh, look! Another tool to "deobfuscate" strings from garbled binaries, because obviously your life was incomplete without it. 🙄 Google Cloud wants you to believe it's revolutionary, but really, it's just another way to make you feel guilty for not understanding #Kubernetes. 😂
https://cloud.google.com/blog/topics/threat-intelligence/gostringungarbler-deobfuscating-strings-in-garbled-binaries #deobfuscation #GoogleCloud #techhumor #binarytools #developerlife #HackerNews #ngated

GoStringUngarbler: Deobfuscating Strings in Garbled Binaries — https://cloud.google.com/blog/topics/threat-intelligence/gostringungarbler-deobfuscating-strings-in-garbled-binaries
#HackerNews #GoStringUngarbler #Deobfuscation #GarbledBinaries #ThreatIntelligence #Cybersecurity

Как приготовить обфускацию в JavaScript и не сжечь лабараторию: AST, babel, плагины

Вероятно каждый программист или компания, сталкивались с мыслями о своей крутости или хотя бы крутости своих алгоритмов 😎. Разумеется, в этом случае может возникнуть соответствующее нежелание делиться разработками с широкой аудиторией. Данная проблема минимизируется переносом части кода на сервер (если речь идёт о клиент-серверных приложениях). Однако, такой подход не всегда применим, и порой обстоятельства вынуждают нас оставлять чувствительные участки кода прямо на виду. В этой статье мы познакомимся, как минимум, с крутым словом, а по возможности с такой техникой как обфускация в контексте языка JavaScript. Реализуем механизмы для скрытия алгоритмов и усложнения обратной разработки кода. Попутно, мы посмотрим что такое AST, и приведём инструменты, с помощью которых можно взаимодействовать с ним для реализации обфускации.

https://habr.com/ru/articles/870152/

#javascript #reverseengineering #obfuscation #ast #babel #deobfuscation

LLVM-powered deobfuscation of virtualized binaries

https://blog.thalium.re/posts/llvm-powered-devirtualization/

#llvm #virtualization #deobfuscation #reverseengineering

Just wrapped up the JavaScript Deobfuscation module on HTB Academy, and it was an exciting deep dive into reverse engineering and tackling obfuscated code! 🧩

https://academy.hackthebox.com/achievement/922218/41

#hackthebox #htbacademy #cybersecurity #bugbounty #deobfuscation #javascript

Cobalt Strike Loader Deobfuscation Using CyberChef and Emulation (.hta files): https://embee-research.ghost.io/malware-analysis-decoding-a-simple-hta-loader/

#cyberchef #deobfuscation #malwareanalysis #speakeasy

Play along with this epic 4 hour #virtualization-based #deobfuscation workshop using @radareorg by @mr_phrazer https://www.youtube.com/watch?v=b6udPT79itk #reversing

Evading JavaScript Anti-Debugging Techniques

https://www.nullpt.rs/evading-anti-debugging-techniques

#reverseengineering #javascript #obfuscation #deobfuscation

😶‍🌫 Tired of obfuscated code slowing down your reverse engineering efforts? Let Arnau Gamez (@arnaugamez) from @furalabs teach you how to become a master (de)obfuscator, with his #infosec #training on Modern #Binary #Deobfuscation! Get your ticket now!

🎟️ https://ringzer0.training/trainings/an-analytical-approach-to-modern-binary-deobfuscation.html

😶‍🌫 Tired of obfuscated code slowing down your reverse engineering efforts? Let Arnau Gamez (@arnaugamez) from @furalabs teach you how to become a master (de)obfuscator, with his #infosec #training on Modern #Binary #Deobfuscation! Get your ticket now!

🎟️ https://ringzer0.training/trainings/an-analytical-approach-to-modern-binary-deobfuscation.html

😶‍🌫 Tired of obfuscated code slowing down your reverse engineering efforts? Let Arnau Gamez teach you how to become a master (de)obfuscator, with his #infosec #training on Modern #Binary #Deobfuscation! Get your ticket now!

🎟️ https://ringzer0.training/trainings/an-analytical-approach-to-modern-binary-deobfuscation.html

😶‍🌫 Tired of obfuscated code slowing down your reverse engineering efforts? Let Arnau Gamez teach you how to become a master (de)obfuscator, with his #infosec #training on Modern #Binary #Deobfuscation! Get your ticket now!

🎟️ https://ringzer0.training/trainings/an-analytical-approach-to-modern-binary-deobfuscation.html

🌞 Happy Sunday! Here is some #SundayLearning inspiration for you - check out the workshop “Hands-on #Binary #Deobfuscation - From Symbolic Execution to Program Synthesis”, by our instructor Arnau Gàmez i Montolio (@arnaugamez) from @furalabs.

🎥 https://vimeo.com/723157684

Did you like the workshop? Then check out Arnau's training "An Analytical Approach to Modern Binary Deobfuscation". Early bird tickets are still available!

🎟️ https://ringzer0.training/trainings/an-analytical-approach-to-modern-binary-deobfuscation.html

Looking into just trying to deobfuscate the older NAC stuff for generating the iMessage validation data...

Looks like it might be possible? As far as I can tell, it's just MBA + Control Flow Obfuscation.

I don't totally understand simplifying MBA, but it looks like it can be done with certain tools, and after that undoing the CFO should be easy-er?

#ReverseEngineering #MixedBooleanArithmetic #FairPlay #ControlFlowObfuscation #ControlFlow #deobfuscation #obfuscation #BinaryNinja #BinaryObfuscation

😶‍🌫 Tired of obfuscated code slowing down your reverse engineering efforts? Let @arnaugamez from @furalabs teach you how to become a master (de)obfuscator, with his #infosec #training on Modern #Binary #Deobfuscation! Get your early bird ticket now!

🎟️ https://ringzer0.training/trainings/an-analytical-approach-to-modern-binary-deobfuscation.html

😶‍🌫 Tired of obfuscated code slowing down your reverse engineering efforts? Become a master (de)obfuscator by joining @arnaugamez 's #infosec #training on Modern #Binary #Deobfuscation!

🎟️ https://ringzer0.training/trainings/an-analytical-approach-to-modern-binary-deobfuscation.html