koolo icon indicating copy to clipboard operation
koolo copied to clipboard

Avoid (ban) signature detection by Blizzard

Open xVoidByte opened this issue 9 months ago • 2 comments

The PR contains some security changes:

  • Koolo binaries will be now obfuscated upon build.
  • Unique hash per binary.
  • Randomized name to prevent signature/process detection.
  • Updated better_build.exe along with the documentation and other files.

Users will be required to do small modifications prior to current build as written in the documentation.

Two testers have been running for a few hours now without any issues (awaiting third person to give results tomorrow).

xVoidByte avatar Apr 02 '25 21:04 xVoidByte

PS C:\Users\doey\Downloads\koolo> ./build.bat
Start building Koolo Cleaning up previous artifacts... Building Koolo binary... 'garble' is not recognized as an internal or external command, operable program or batch file. Error occurred #1.

PS C:\Users\doey\Downloads\koolo> ./better_build.bat - builds successfully but does not create a koolo.exe in the build folder

ooeygg avatar Jun 19 '25 21:06 ooeygg

@ooeygg you should follow the updated README documentation of the branch, right now you're using both main branch and this PR which would cause an error since you never installed Garble.

xVoidByte avatar Jun 20 '25 06:06 xVoidByte