Awesome GitHub RepositoriesCode Obfuscation Techniques

This project is a JavaScript code protection tool designed to transform source code into a version that is difficult for humans to read. Its primary purpose is to protect intellectual property and prevent reverse engineering by altering the original program logic. The tool employs several advanced techniques to hinder analysis, including control flow flattening and the injection of dead code. It can compile functions into custom bytecode executed by an embedded virtual machine and encrypt string literals to prevent static analysis of text. Additional capabilities include anti-debugging mecha

This project is a programming satire project and a curated catalog of software anti-patterns designed to demonstrate how to write intentionally unmaintainable and fragile code. It serves as a maintainability educational resource and a study in poor design choices, using extreme examples of obfuscated logic to teach developers how to recognize and avoid technical debt. The project provides a comprehensive guide to code obfuscation, focusing on techniques to hide program logic through deceptive naming, bizarre control flows, and misleading documentation. It distinguishes itself by intentionally

Al-Khaser is a research project focused on the development of anti-analysis and evasion techniques to resist reverse engineering. It provides implementations for detecting and evading virtual machines, sandboxes, and debuggers to prevent software analysis. The project implements control flow obfuscation through anti-disassembly methods and utilizes dynamic API resolution to bypass static import tables. It further hinders forensic analysis by manipulating memory headers to prevent process dumps and utilizing remote code injection to execute logic in external processes. The capability surface

Commix is an automated tool for detecting and exploiting OS command injection vulnerabilities in web applications. It probes user-supplied input vectors with heuristic test payloads, analyzes response differences to identify injection points, and then automates the execution of arbitrary operating system commands on the target server. The tool distinguishes itself through a multi-layer filter bypass engine that evaluates input constraints independently per filter type and composes tailored evasion strategies into a single payload. A modular payload tamper pipeline transforms raw injection str

PMD este un analizor static de cod multi-limbaj utilizat pentru a identifica defecte de programare, variabile neutilizate și cod mort fără a executa programul. Acesta funcționează ca un detector de code smell și un enforcer al standardelor de codare, asigurându-se că codul sursă respectă convențiile de denumire specifice, cerințele structurale și ghidurile de stil ale proiectului. Proiectul dispune de un motor de reguli bazat pe XPath care permite utilizatorilor să definească tipare de analiză personalizate folosind interogări asupra unui arbore sintactic abstract. Include, de asemenea, un detector de copy-paste pentru a identifica blocuri de cod duplicate în mai multe fișiere și un designer vizual de reguli pentru crearea și testarea tiparelor de detectare personalizate. Suprafața de analiză acoperă detectarea bug-urilor, identificarea problemelor de mentenabilitate pentru a reduce datoria tehnică și verificarea implementărilor de testare. De asemenea, oferă capabilități pentru identificarea metodelor excesiv de complexe și a listelor de parametri prea lungi.