oalabs
patreon
Live Stream VOD: Automated Go String Decryption for UNK Obfuscator - Part 1
🕑 Added 2023-10-18 12:59:20 +0000 UTCIn this Twitch stream we extend our previous work on Garble Go string decryption to tackle another type of obfuscator used for GoLang that creates in-line obfuscated strings (similar to ADV) instead of using functions. The source/name of the obfuscator is currently unknown but the obfuscation pattern in the compiled binary is easy to identify.
Samples
dd124a7b396150e4d8275c473594e47ac24606ef0955e2c13310aac9045554ac
Notes
Go Stack Strings - Researching a generic solution to decrypt these stack strings
Comments
m4n0w4r
Nice stream! Just note here: I tested the code, it works well with unicorn (1.0.3), but with unicorn (2.0.0rc6 till 2.0.1.post1 ) will receive error like this "Could not allocate dynamic translator buffer"
