Awesome GitHub RepositoriesCode Obfuscation Techniques

This project is a JavaScript code protection tool designed to transform source code into a version that is difficult for humans to read. Its primary purpose is to protect intellectual property and prevent reverse engineering by altering the original program logic. The tool employs several advanced techniques to hinder analysis, including control flow flattening and the injection of dead code. It can compile functions into custom bytecode executed by an embedded virtual machine and encrypt string literals to prevent static analysis of text. Additional capabilities include anti-debugging mecha

This project is a programming satire project and a curated catalog of software anti-patterns designed to demonstrate how to write intentionally unmaintainable and fragile code. It serves as a maintainability educational resource and a study in poor design choices, using extreme examples of obfuscated logic to teach developers how to recognize and avoid technical debt. The project provides a comprehensive guide to code obfuscation, focusing on techniques to hide program logic through deceptive naming, bizarre control flows, and misleading documentation. It distinguishes itself by intentionally

Al-Khaser is a research project focused on the development of anti-analysis and evasion techniques to resist reverse engineering. It provides implementations for detecting and evading virtual machines, sandboxes, and debuggers to prevent software analysis. The project implements control flow obfuscation through anti-disassembly methods and utilizes dynamic API resolution to bypass static import tables. It further hinders forensic analysis by manipulating memory headers to prevent process dumps and utilizing remote code injection to execute logic in external processes. The capability surface

Commix is an automated tool for detecting and exploiting OS command injection vulnerabilities in web applications. It probes user-supplied input vectors with heuristic test payloads, analyzes response differences to identify injection points, and then automates the execution of arbitrary operating system commands on the target server. The tool distinguishes itself through a multi-layer filter bypass engine that evaluates input constraints independently per filter type and composes tailored evasion strategies into a single payload. A modular payload tamper pipeline transforms raw injection str

PMD est un analyseur de code statique multi-langage utilisé pour identifier les défauts de programmation, les variables inutilisées et le code mort sans exécuter le programme. Il fonctionne comme un détecteur de code smell et un enforcer de standards de codage, garantissant que le code source adhère à des conventions de nommage spécifiques, des exigences structurelles et des guides de style de projet. Le projet dispose d'un moteur de règles basé sur XPath qui permet aux utilisateurs de définir des patterns d'analyse personnalisés en utilisant des requêtes sur un arbre de syntaxe abstraite. Il inclut également un détecteur de copier-coller pour identifier les blocs de code dupliqués à travers plusieurs fichiers et un concepteur de règles visuel pour créer et tester des patterns de détection personnalisés. La surface d'analyse couvre la détection de bugs, l'identification de problèmes de maintenabilité pour réduire la dette technique, et la vérification des implémentations de tests. Il fournit également des capacités pour identifier les méthodes trop complexes et les listes de paramètres excessives.