Baby obfuscator

Using LLVM Pass to obfuscate programs.

Write up (in Chinese):

• 使用 LLVM Pass 实现字符串加密
• 重写 OLLVM 之虚假控制流
• 重写 OLLVM 之控制流平坦化

Features

Requirement

llvm-9 and llvm-9-dev
cmake >= 3.10
gcc / clang

Build

mkdir build && cd build
# You should modify the DLLVM_DIR option to fit your environment
cmake .. -DLLVM_DIR=/usr/lib/llvm-9/lib/cmake/llvm/
cmake --build . -- -j$(nproc)

How to use

# You should assign ${fullname} and ${basename} as your program's name
# Example: fullname=test.c; basename=test
# Compile origin program
clang-9 -emit-llvm -S ${fullname} -o ${basename}.ll
# Load obfuscator to obfuscate program
# You can change -obfstr option to other options
opt-9 -load /part/to/libObfuscator.so \
      -obfstr ${basename}.ll \
      -o ${basename}_obfuscated.bc
# If you are using ObfuscateString Pass, you should link encrypt.c with your program
# Compile to target platform
clang-9 ${basename}_obfuscated.bc -o ${basename}

Acknowledgement

The project has "borrow" some code from these projects:

obfuscator-llvm/obfuscator

License

MIT License