threadtear icon indicating copy to clipboard operation
threadtear copied to clipboard

It's your turn! Make an own execution!

Open GraxCode opened this issue 5 years ago • 3 comments

If you know an obfuscator that has no execution class yet, or have an idea what could be useful for deobfuscation and analysis, make your own execution! Just extend me.nov.threadtear.execution.Execution, do your action, and open a pull request or send it to me on discord: noverify#7184

GraxCode avatar Apr 13 '20 11:04 GraxCode

Take a look at http://oldschool25.runescape.com/gamepack.jar

They add redundant methods, making it harder to signature methods and fields, obfuscate integer values using multipliers, opaque predicates and some other shit.

There's plenty of deobbers out there that deob it but would be nice to have it in your deobber.

eox2 avatar Jul 07 '20 03:07 eox2

Take a look at http://oldschool25.runescape.com/gamepack.jar

They add redundant methods, making it harder to signature methods and fields, obfuscate integer values using multipliers, opaque predicates and some other shit.

There's plenty of deobbers out there that deob it but would be nice to have it in your deobber.

Haven't taken a look at it, but doesn't "Remove unnecessary" and some generic executions do the job?

GraxCode avatar Jul 07 '20 07:07 GraxCode

the osrs gamepack as it's called is mostly unaffected by threadtear. Our deobfuscators works pretty well though. They can be found here https://github.com/open-osrs/runelite/blob/master/deobfuscator/src/main/java/net/runelite/deob/Deob.java

I don't think it's rather important these get implemented to threadtear, as they are very specific use cases but I'll admit it would be nice if threadtear could handle it and we could dump the module hahaha :p

zeruth avatar Jul 24 '20 19:07 zeruth