Factbites
 Where results make sense
About us   |   Why use us?   |   Reviews   |   PR   |   Contact us  

Topic: Obfuscated code


  
  Obfuscated code - Wikipedia, the free encyclopedia
Obfuscated code is source code that is (perhaps intentionally) very hard to read and understand.
Thus, obfuscators do not provide security of a level similar to modern encryption schemes, and should be used with other measures in tandem, in cases where security is of high importance.
Source code obfuscators are often buggy because most are built using simple-string munging tools that fail to account for all the complexities of the source language syntax.
en.wikipedia.org /wiki/Obfuscated_code   (1340 words)

  
 Obfuscated Perl contest - Wikipedia, the free encyclopedia
The Obfuscated Perl contest is a competition for programmers of Perl which was held annually between 1996 and 2000.
The entries are judged on aesthetics, output and incomprehensibility.
Code which purposefully crashes the judges' machines is not recommended.
en.wikipedia.org /wiki/Obfuscated_Perl_contest   (206 words)

  
 Remotesoft Obfuscator User's Manual
An additional benefit to obfuscation is a substantial reduction in the size of your code, due to the removal of unnecessary information and the replacement of large, human-readable identifiers with small machine generated names.
Obfuscator adds a warning to the log file if the above reflection methods are used in the obfuscated code.
By default, if the obfuscation target is exe, all classes and their members are renamed except those can not be changed, such as special method names (.ctor and.cctor), and virtual methods that are first declared in external assemblies.
www.remotesoft.com /salamander/obfuscator/manual-010603   (6427 words)

  
 Obfuscated Shellcode, the Wolf in Sheep's Clothing (Part 1)
The point of writing about shellcode obfuscation, and how it could impact a poorly trained analyst is that this threat is a very high level one.
Typically the exploit code is written in C or C++ as most heavy weight web application (such as web servers, and operating systems) are written in those languages.
Now seen that the majority of exploit code has this NOP sled mainly comprised of the hex character 0x90 it is an easy task for the intrusion detection system vendors to build a signature.
www.windowsecurity.com /articles/Obfuscated-Shellcode-Part1.html   (1611 words)

  
 JavaScript Obfuscator - obfuscate (make unreadable) and encode JavaScript, in .js files or in html and asp pages   (Site not responding. Last check: 2007-10-08)
By default that highly mangled and obfuscated code is encoded afterwards to hide the structure of the script completely.
By default encoding is applied to the result of obfuscation, but it's possible to apply encoding to original source to allow effortless code hiding not requiring any changes to the code to be hidden.
Stunnix JavaScript Obfuscator has a state of the art support for making obfuscated and encoded scripts expirate; several variants of server hostname checking (single allowed host name, list of hostname tails, regular expression hostname should match) are also supported.
www.stunnix.com /prod/jo/overview.shtml   (2777 words)

  
 go2net | internet | deep magic | The 0xC days of Christmas
A really fine obfuscated program will be artistic and inscrutable in source form, execute in a highly circuitous fashion, and produce output that (often only in hindsight) follows obviously from the source.
Obfuscated code has a special place in the heart of many hackers.
The popularity of the annual "International Obfuscated C Contest" (IOCCC) is the best evidence; some of the programs from years past obviously required herculean efforts by the entrants.
samskivert.com /internet/deep/1997/01/08/body.html   (1382 words)

  
 LWN: Protect Your Source Code: Obfuscation 101 (O'ReillyNet)
The best way to actually obfuscate something like Java or C is to simply ensure that the compiler does as much optimisation as possible, and that where names "leak" from the source into the object code, they get renamed to something less useful.
I find that even well-written code, but written by somebody else (where "me a year ago" counts as "somebody else"), is often hard enough to grok that for minor and medium sized things, it often makes more sense to rewrite things from scratch rather than to adapt it.
Another possibility is putting all the compiled code in an archive, encrypt it, and write a small C wrapper that loads the archive in memory, decrypts it and runs it (either in the Java/Python interpreter, or directly as a native executable).
lwn.net /Articles/131436   (2308 words)

  
 JOT: Journal of Object Technology -Obfuscation and .NET, Richard Wiener
One of the side-effects of obfuscation is the difficulty of debugging obfuscated code.
Incremental obfuscation allows the developer to make changes to the original sources after releasing an obfuscated assembly and then provide a patch to the user that reflects the changes to the original application while preserving the name-mapping used in the original release.
The obfuscators that failed generally produced assemblies that would not run or did not provide sufficient features to be of use for deploying commercial obfuscated assemblies.
www.jot.fm /issues/issue_2005_05/column6   (2459 words)

  
 Obfuscated C Code
The source code is written in pig-latin and the layout is in the shape of a pig's head.
The source code is a circle and the program works by calculating its own area and diameter, and then doing a division to approximate pi!!
The preprocessor generates code for a single printf statement with one long string which is the solution.
www.cise.ufl.edu /~manuel/obfuscate/obfuscate.html   (806 words)

  
 Analysis of SCO's Las Vegas Slide Show
SCO further obfuscated the code on this slide by switching it to a Greek font, but that was easily undone.
The ATandT code that was subject of this lawsuit survives into SCO's current system, and the version that was included in Linux seems to be from System V. That version differs from the public domain version by 2 lines - both concerned with diagnostics rather than working code.
The code was intended for one SGI system that was never sold, and another that is extremely rare, and was not used in the mainstream Linux kernel.
perens.com /Articles/SCO/SCOSlideShow.html   (1877 words)

  
 The 0th Annual Obfuscated Perl Contest - The Perl Journal, Summer 1996
This award is for the best piece of Perl code that fits into 4 (four) lines of 76 (seventy-six) characters of ASCII code (not counting end-of-line newlines).
As an example, a past winner in the Obfuscated C contest (our pale, weaker cousin) formatted his code in the shape of a maze; the program read its own source code in and implemented an ASCII 3-D maze walking program.
Bonus points are awarded for obfuscated code which is not only syntactically obfuscated, but semantically obfuscated - code which appears to do one thing but does another is deemed extremely devilish.
www.foo.be /docs/tpj/issues/vol1_2/tpj0102-0008.html   (1092 words)

  
 Dealing With Obfuscated Code And Enabling/Disabling The Verifier
So far, all examples of this problem that have been reported to us involve obfuscated code and have turned out to be a problem with the code obfuscation product used to obfuscate the source code.
The problem is that some older code obfuscators create class names which are invalid according to the Java spec - class names that start with numbers are the most common example of this.
If you get this kind of error while dealing with obfuscated code, or believe your class file to be ok, use the Java2 javap to verify the class files.
www.oracle.com /technology/products/oracle8i/htdocs/jserver_faq/815faq0004.html   (698 words)

  
 Articles: 15th IOCCC Results Posted
Obfuscated code (aka elegant) is no faster, even if it is shorter, and may even compile into worse code.
Understanding obfuscated code is difficult - that's the whole point - therefore those who understand it (especially those that write it) have a firm grasp of the language - moreso than programmers that don't.
Obfuscated code contests are about wank factor and showing off how well one knows a language.
www.adequacy.org /headcheese/metalmachinemusic/0101261255222,3.html   (4632 words)

  
 Stunnix Perl-obfus - the obfuscator for Perl source code   (Site not responding. Last check: 2007-10-08)
PAR and PerlApp are not a solution to the code hiding, since all source code of the application gets written to some temporary directory once executable produced by these tools is run, allowing curious users to get to your code in couple of seconds.
Even only obfuscated code with no encoding applied is extremely difficult to understand for a human since the name of variables and subroutines and other symbols are totally meaningless and hard to remember (e.g.
All checks are grouped in the block of code, to which the special initialization code is added without which the program won't work correctly, and the whole resultant block is encoded to protect it from analysis and modification.
www.stunnix.com /prod/po/overview.shtml   (2495 words)

  
 [No title]   (Site not responding. Last check: 2007-10-08)
While this sort of obfuscation would be a hassle to sort through, it would be considered more of a tedious job than a difficult one.
The decompiled code at first looks daunting; however, after some extraneous information is removed, most notably extra try catch statements, much of the code can be figured out.
Even with the control flow obfuscation, it is easy to tell that there is an if statement based on a mod and that the same function is called as a result of the if statement with a different flag.
www.seas.gwu.edu /~simhaweb/security/termpapers/Laura.doc   (786 words)

  
 Semantic Designs: C++ Obfuscator Example
The obfuscator uses special lists provided by the user to define names that should be preserved, ensuring that public interfaces and accesses to public libraries remain valid.
If you obfuscate a set of C++ source files simultaneously as we have with these, only the public symbols they collectively offer will be visible in the compiled source files.
The obfuscator produces a cross reference mapping obfuscated symbols to the orginal symbols, so that obfuscated code in the field can still be decoded if necessary.
www.semdesigns.com /Products/Obfuscators/CppObfuscationExample.html   (271 words)

  
 Thomas Scovell
Doing something as simple as emailing the code to a friend outside the USA from within it was illegal despite the code not being copyright as such.
The authorship of the code is a mystery or a "deathbed secret", adding an intrigue to the story surrounding it.
A slashdot.org reader posted a breakdown of the code which Landon Curt Noll from the IOCCC noted of, "Very good explanation...I was told that anonymous winner used almost (but not quite) the reverse of your explanation to construct the original entry.".
www.thomasscovell.com /tattoo.php   (910 words)

  
 Obfuscated code at opensource encyclopedia   (Site not responding. Last check: 2007-10-08)
fr:Code impénétrable Obfuscated code is source code that is (perhaps intentionally) very hard to read and understand.
There are programming contests which reward the most creatively obfuscated code: The International Obfuscated C Code Contest, Obfuscated Perl Contest and Obfuscated PostScript Contest.
Even when a language is compiled to an executable or bytecode file, someone may choose to run a decompiler which converts these files back into human-readable form (generally sans comments).
www.wiki.tatet.com /Obfuscated_code.html   (812 words)

  
 Larry Osterman's WebLog : Obfuscated code...   (Site not responding. Last check: 2007-10-08)
It also allowed for their code to run on lots of different platforms, all you needed was a compiler (and of course the work to adopt the program to your platform, which they were more than happy to provide).
Since their code had to be platform independent, they already had a restriction that none of their identifiers could be more than 6 characters in length (to work around limitations in the linkers on some of their supported platforms).
Releasing unreadable code that technically does compile is, IMO, the equivalent of releasing byte-code, and not really within what should be expected when you are required to release "source code".
blogs.msdn.com /larryosterman/archive/2004/05/28/143955.aspx   (1516 words)

  
 The 3rd Annual Obfuscated Perl Contest
This award is granted to the code which does the most with the least.
Any code that we don't understand at the end of this phase is probably a winner, at which point we'll give up in tears and look at the SOLUTIONS file.
As an example, a past winner in the Obfuscated C contest (our pale, weaker cousin) formatted his code in the shape of a maze; the program read its own source code and implemented an ASCII 3D maze walking program.
www.foo.be /docs/tpj/issues/vol3_2/tpj0302-0012.html   (868 words)

  
 Obfuscated code?
"But Sontag said the BPF routines were not intended to be an example of stolen code, but rather a demonstration of how SCO was able to detect "obfuscated" code, or code that had been altered slightly to disguise its origins.
The slide displaying the code should have been written differently to reflect that intention, he said.
But if you go to Slide 15 It's pretty clear what they were saying before the code was debunked was much different from what they are saying now.
www.oreillynet.com /cs/user/view/cs_msg/23523   (118 words)

  
 A Sip From The Firehose: The 15th International Obfuscated C Code Contest
The International Obfuscated C Code Contest home page is at http://www.ioccc.org/.
He said that the optimizer in Turbo C would not generate any stack setup and cleanup code if it only saw a return statement in a function, thus saving several machine instructions.
If you have obscure code and don't want to submit it to the contest, why not share it with the rest of our community by putting the code in our code central repository.
bdn.borland.com /article/0,1410,20702,00.html   (557 words)

  
 [No title]
Obfuscators usually replace the name of the methods and member variables.
It fully encrypts the byte code so that from JVM's point of view, the encrypted code is no longer a valid Java byte-code.
After the code is finished, a GUI based application is used to encrypt those class files that need to be protected.
www.jbitsoftware.com /JBitSoftware/jlockinfo.html   (283 words)

  
 Email Obfuscator   (Site not responding. Last check: 2007-10-08)
ob·fus·cate: To make so confused or opaque as to be difficult to perceive or understand.
The obfuscated code (complete with a mailto link!) will appear in the field below.
Just cut and paste the obfuscated code to the web page where you'd like to place the mailto link.
alicorna.com /obfuscator.html   (367 words)

  
 Lucidator Obfuscated Code Debugging Tool
Lucidator is a standalone stack trace and symbol translation tool used to debug obfuscated code.
Dotfuscator and DashO generate a map file that can be used by developers and/or support personnel to translate the obfuscated stack traces and symbols back to unobfuscated stack traces and symbols.
Lucidator is perfect for support teams that need to translate and debug obfuscated code.
www.preemptive.com /products/Lucidator.html   (120 words)

  
 CodeShield(tm) Java Byte Code Obfuscator
Rearranges byte code instructions so that decompilation to structured code is virtually impossible by decompilers.
Optional obfuscation reports let you track the changes on symbolic names, and allow you to understand stack traces from your obfuscated code.
Allows user defined base package names on obfuscated code to add flexibility to your build environment.
www.codingart.com /codeshield.html   (447 words)

  
 Coding Obfuscation   (Site not responding. Last check: 2007-10-08)
The The International Obfuscated C Code Contest has always been interesting.
Ran across some great examples of Coding Obfuscation that started out making me laugh- then I quickly got disgruntled when I reflected on code i've read by other people.
It's a pretty inspirational piece of work at an inherent obfuscated programming language that adds a little more challenge as if it's needed.
www.digitalpeer.com /id/coding   (237 words)

  
 Succ Zeroth International Obfuscated Haskell Code Contest Results | Lambda the Ultimate
The contest would present several "known to be hairy" problems, where all known implementations tend to bend the brain.
The winner is goes to the code whose (correct) implementation is judged the most easily understandable.
Look for code that is fat, has lots of comments and/or comments along the line...
lambda-the-ultimate.org /node/view/308   (301 words)

Try your search on: Qwika (all wikis)

Factbites
  About us   |   Why use us?   |   Reviews   |   Press   |   Contact us  
Copyright © 2005-2007 www.factbites.com Usage implies agreement with terms.