Reverse Engineering Snapchat (Part II): Debofuscating the Undeobfuscatable

Re:Reverse Engineering Snapchat (Part II): Debofuscating the... by sintax on Monday June 22, 2020 @07:25AM (#23599072)

For MBA, there's also Arybo[1] from Quarkslab. Never used it and seeing the reference to SSPAM, I assume the author is aware of the tool.

[1] https://github.com/quarkslab/arybo

[ Parent | on HN ]

Re:Reverse Engineering Snapchat (Part II): Debofuscating the... by 3eed on Monday June 22, 2020 @09:24AM (#23599887)

I came across Arybo while working on the binary but I can't remember why I didn't use it, this is vague memory now. Anyway it does the job in one go, I added an edit.

[ Parent | on HN ]