META - Handle antidisassembly tricks · radareorg/radare2#17019

2020-06-08T12:59:49.000Z

- [x] https://github.com/radareorg/radare2/issues/5136 - [ ] https://github.com/radareorg/radare2/issues/4635 - [ ] https://medium.com/@0x4ndr3/assembly-wrapping-a-new-technique-for-anti-disassembly-c144eb90e036 (see https://reverseengineering.stackexchange.com/questions/1531/what-is-overlapping-instructions-obfuscation also)

(1 comment) (0 reactions) (0 assignees)C (23,826 stars) (3,229 forks)batch import

METARAsm-Disassemblerantidisasmgood first issuehackatontest-required

説明

https://github.com/radareorg/radare2/issues/5136
https://github.com/radareorg/radare2/issues/4635
https://medium.com/@0x4ndr3/assembly-wrapping-a-new-technique-for-anti-disassembly-c144eb90e036 (see https://reverseengineering.stackexchange.com/questions/1531/what-is-overlapping-instructions-obfuscation also)

コントリビューターガイド

技術スタック: c
領域: security
Issue 種別: feature
難度: 5
推定時間: over 1 week
活動状況: stale
明確さ: mostly clear
前提条件: Reverse engineering conceptsradare2 internalsAssembly obfuscation
初心者向け度: 10
調査方針: The issue is a meta tracker for implementing antidisassembly trick detection, referencing issues #5136 and #4635, and an external article on assembly wrapping. The research direction involves studying these references, understanding overlapping instructions and other obfuscation techniques, then designing a detection and handling mechanism within radare2's disassembly engine. No active maintainer response or PRs are linked.