News for hackers. Stuff that matters.
Re:Demovfuscator by Kristine1975 on Friday June 24, 2016 @03:50AM (#11967626)
Previous HN discussions on the movfuscator:

https://news.ycombinator.com/item?id=9751312

https://news.ycombinator.com/item?id=10021259

[ Parent | on HN ]
Re:Demovfuscator by a_c on Friday June 24, 2016 @06:20AM (#11968471)
From movfuscator's FAQ [1]:

Q: Why did you make this? A: I thought it would be funny

Is the motivation of demovfuscator to be not funny?

[1] https://github.com/xoreaxeaxeax/movfuscator#faq

Edit: Not sure why the down vote. It was intended as a joke, if it means anything

[ Parent | on HN ]
Re:Demovfuscator by Kristine1975 on Friday June 24, 2016 @10:21AM (#11969942)
>Not sure why the down vote. It was intended as a joke, if it means anything

My guess (I didn't downvote you) is that your post added nothing to the discussion. Joke posts tend to be frowned upon here.

[ Parent | on HN ]
Re:Demovfuscator by Gladdyu on Friday June 24, 2016 @09:40AM (#11969678)
For people wondering what movfuscation actually is and how it works: https://www.cl.cam.ac.uk/~sd601/papers/mov.pdf
[ Parent | on HN ]
Re:Demovfuscator by uudecode on Friday June 24, 2016 @10:49AM (#11970177)
I know that capstone, keystone and unicorn are marketed to the "security community" but these projects are some of the most promising I've seen for programming in general, e.g., for the few people who still might want to write small, simple (and fast) programs that run on multiple architectures.

Great work.

(This project relies on keystone and capstone.)

[ Parent | on HN ]
Re:Demovfuscator by Tepix on Friday June 24, 2016 @05:59AM (#11968336)
I wonder how well it can work once you mix different variants of the movfuscator (using xor or load instead of mov etc).
[ Parent | on HN ]