Book: D&D of MOGs

Bot Fighting 201, part 3. ithare::obf: An Open Source Data+Source Randomized Obfuscation Library

January 9, 2018 by “No Bugs” Bunny

Obfuscation: Growing Forest to Hide a Leaf

Quote:

This is all what the-best-available-decompiler was able to do with our obfuscated code

Another Quote:

Performance-wise, we can do A LOT of obfuscation per network tick

Filed under: Book: D&D of MOGs1st beta of Vol. VII-IXOn.SecurityFraud Prevention

Read more

Bot Fighting 201, Part 2: Obfuscating Literals

January 2, 2018 by “No Bugs” Bunny

Obfuscating Literals

Quote:

However, we can (and SHOULD) do MUCH better than that

Another Quote:

With our approach, each and every obfuscation has to be hacked individually..

Filed under: Book: D&D of MOGs1st beta of Vol. VII-IXOn.SecurityFraud Prevention

Read more

Bot Fighting 201: Declarative Data+Code Obfuscation with Build-Time Polymorphism in C++

December 26, 2017 by “No Bugs” Bunny

Obfuscation: What You See Is NOT What You Get

Quote:

Technically, what we’re looking for here, is any kind of bijection; we’ll use this bijection to convert our data from one representation into another one (and as it is a bijection, we can revert it later).

Another Quote:

As we’re not writing our obf<> classes manually (instead, we have a code generator doing it for us on each build), the sky is the limit to the obfuscations we can generate."<> classes manually (instead, we have a code generator doing it for us on each build), the sky is the limit to the obfuscations we can generate.

Filed under: Book: D&D of MOGs1st beta of Vol. VII-IXOn.SecurityFraud Prevention

Read more

Bot Fighting 103. Code Integrity Checks, Code Scrambling

December 12, 2017 by “No Bugs” Bunny

You're under arrest for asking the right question at the wrong time

Quote:

Bingo! We’ve got an executable, which automagically performs TONS of integrity checks, which checks are spread all over the executable, and are extremely non-obvious too.

Another Quote:

This approach of 'not revealing code until attack costs are high' is certainly not limited to payments.

Filed under: Book: D&D of MOGs1st beta of Vol. VII-IXOn.SecurityFraud Prevention

Read more