Basics of Anti-Detection Development (1)
Overview
This article explores fundamental concepts in Windows-based malware development, focusing on dynamic function loading, shellcode execution methods, injection techniques, and obfuscation strategies.
Dynamic Function Loading and Execution
Let's begin with a simple example:
int main(void) {
MessageBoxA(0, "Foo Here.", " ...
Posted on Mon, 27 Jul 2026 16:20:27 +0000 by bensonang
Understanding AST for Code Transformation
Exploring Abstract Syntax Tree (AST) manipulation to understand how obfuscation tools work.
The first step involves parsing JavaScript code into an AST structure:
let a,b=1;
// 注释
var obj = {
"name":1+3*2,
"func":function add(a,b){
let a1=3;
return a+b
}
}
function add(a,v){
return a+v;
}
let ...
Posted on Fri, 17 Jul 2026 17:16:36 +0000 by chrispols
Android Code Obfuscation with ProGuard and R8
ProGuard Workflow
ProGuard operates through four distinct phases: shrink, optimize, obfuscate, and preverify. All four phases are optional, but their execution order remains fixed.
shrink: Identifies and removes unused classes, fields, methods, and attributes from the project.
optimize: Optimizes bytecode by removing unnecessary instructions or ...
Posted on Fri, 19 Jun 2026 18:16:57 +0000 by pleek