demovfuscator
demovfuscator copied to clipboard
kirschju
A work-in-progress deobfuscator for movfuscated binaries
It is a like solution for cases like #21 and #22 . - compile your self - node.cpp uses the thing of #23 (pull requests)
Hi, I've tried using demovfuscator on the binary, but got error ``` possibly movfuscated Relocations: sigaction at 8066018 exit at 8066014 fgets at 8066010 printf at 806600c stdin at 860f360...
i have downloaded and installed the libraries capstone keystone z3 babyc file [https://0xd13a.github.io/ctfs/asis2018/babyc/babyc.tar.xz](url) and got this error when trying `./demov -o patched babyc ` : `possibly movfuscated Relocations: strncmp at...
Hi, Tried it on a movfuscated ELF and demov fails with "Seg Fault" ``` possibly movfuscated Relocations: sigaction at 804e2a4 strlen at 804e2a0 printf at 804e298 exit at 804e29c Segments:...
CSAW RED 2019 Quals - task `mov_it` (250pt) https://red.csaw.io/challenges#time%20to%20mov%20it `nc rev.chal.csaw.io 1004` binary [3642a85e55a487e2c6001f7b067370c5-mov_it.gz](https://github.com/kirschju/demovfuscator/files/3677895/3642a85e55a487e2c6001f7b067370c5-mov_it.gz) mirror https://red.csaw.io/files/3642a85e55a487e2c6001f7b067370c5/mov_it
here is the error when I execute make command ``` clang++ -Wall -Wextra -pedantic -std=c++11 -lcapstone -lkeystone -lz3 -lssl -lcrypto elfhlp.o demov.o test.o memhlp.o dishlp.o utils.o ctlhlp.o ctlelem.o node.o asmhlp.o...
I am receiving the following errors while attempting to compile. 
Swapping out the current taint engine for a new, more precise and faster one.
Updated ctlelem.hpp and node.hpp to include cstdint. This is required for uint32_t.
