混淆方式
代码混淆,有多种方式=手段,此处概述如下:
代码混淆手段 | 简称=缩写 | ollvm参数 | goron参数 | 说明 |
---|---|---|---|---|
字符串加密 | sobf =String Obfuscation |
-mllvm -sobf |
-mllvm -irobf-cse |
把字符串明文加密成乱码字符串 |
控制流平坦化 | fla =Control Flow Flattening |
-mllvm -fla |
-mllvm -irobf-cff |
|
虚假控制流 | bcf =Bogus Control Flow |
-mllvm -bcf |
||
指令替换 | sub =Instruction Substitution |
-mllvm -sub |
||
基本块分割 | split =Basic Block Splitting |
-mllvm -split |
||
间接跳转 | indbr =indirect branch |
|||
间接函数调用 | icall =indirect call |