demovfuscator
A deobfuscator that recovers control flow from binaries compiled with the M/o/Vfuscator one-instruction compiler.
What is demovfuscator?
Demovfuscator is a reverse engineering tool that deobfuscates binaries compiled with the M/o/Vfuscator, a compiler that reduces programs to use only the MOV instruction. It recovers the original control flow and program structure from these heavily obfuscated executables, making them analyzable again. The tool uses static taint analysis and SMT solving to generically handle movfuscated code without relying on implementation-specific assumptions.
Reverse engineers, security researchers, and CTF participants who need to analyze binaries obfuscated with M/o/Vfuscator. It's particularly useful for those dealing with advanced obfuscation techniques in competitive or real-world scenarios.
Demovfuscator offers a generic, hardening-resistant approach to deobfuscation that works against real-world movfuscated binaries. Unlike manual analysis or pattern-based tools, it uses formal methods to recover control flow, saving significant time and effort in reverse engineering tasks.
Overview
A work-in-progress deobfuscator for movfuscated binaries
Use Cases
Best For
- Analyzing CTF challenges that use M/o/Vfuscator obfuscation
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
