Awesome GitHub RepositoriesCode Obfuscation Techniques

This project is a JavaScript code protection tool designed to transform source code into a version that is difficult for humans to read. Its primary purpose is to protect intellectual property and prevent reverse engineering by altering the original program logic. The tool employs several advanced techniques to hinder analysis, including control flow flattening and the injection of dead code. It can compile functions into custom bytecode executed by an embedded virtual machine and encrypt string literals to prevent static analysis of text. Additional capabilities include anti-debugging mecha

This project is a programming satire project and a curated catalog of software anti-patterns designed to demonstrate how to write intentionally unmaintainable and fragile code. It serves as a maintainability educational resource and a study in poor design choices, using extreme examples of obfuscated logic to teach developers how to recognize and avoid technical debt. The project provides a comprehensive guide to code obfuscation, focusing on techniques to hide program logic through deceptive naming, bizarre control flows, and misleading documentation. It distinguishes itself by intentionally

Al-Khaser is a research project focused on the development of anti-analysis and evasion techniques to resist reverse engineering. It provides implementations for detecting and evading virtual machines, sandboxes, and debuggers to prevent software analysis. The project implements control flow obfuscation through anti-disassembly methods and utilizes dynamic API resolution to bypass static import tables. It further hinders forensic analysis by manipulating memory headers to prevent process dumps and utilizing remote code injection to execute logic in external processes. The capability surface

Commix is an automated tool for detecting and exploiting OS command injection vulnerabilities in web applications. It probes user-supplied input vectors with heuristic test payloads, analyzes response differences to identify injection points, and then automates the execution of arbitrary operating system commands on the target server. The tool distinguishes itself through a multi-layer filter bypass engine that evaluates input constraints independently per filter type and composes tailored evasion strategies into a single payload. A modular payload tamper pipeline transforms raw injection str

PMD es un analizador de código estático multilingüe utilizado para identificar fallos de programación, variables no utilizadas y código muerto sin ejecutar el programa. Funciona como un detector de olores de código (code smells) y ejecutor de estándares de codificación, asegurando que el código fuente se adhiera a convenciones de nomenclatura específicas, requisitos estructurales y guías de estilo del proyecto. El proyecto cuenta con un motor de reglas basado en XPath que permite a los usuarios definir patrones de análisis personalizados usando consultas contra un árbol de sintaxis abstracta. También incluye un detector de copiar y pegar para identificar bloques de código duplicados en múltiples archivos y un diseñador visual de reglas para crear y probar patrones de detección personalizados. La superficie de análisis cubre la detección de errores, la identificación de problemas de mantenibilidad para reducir la deuda técnica y la verificación de implementaciones de pruebas. También proporciona capacidades para identificar métodos excesivamente complejos y listas de parámetros excesivas.