META - Handle antidisassembly tricks · radareorg/radare2#17019

2020-06-08T12:59:49.000Z

- [x] https://github.com/radareorg/radare2/issues/5136 - [ ] https://github.com/radareorg/radare2/issues/4635 - [ ] https://medium.com/@0x4ndr3/assembly-wrapping-a-new-technique-for-anti-disassembly-c144eb90e036 (see https://reverseengineering.stackexchange.com/questions/1531/what-is-overlapping-instructions-obfuscation also)

(1 留言) (0 反應) (0 負責人)C (23,826 star) (3,229 fork)batch import

METARAsm-Disassemblerantidisasmgood first issuehackatontest-required

描述

https://github.com/radareorg/radare2/issues/5136
https://github.com/radareorg/radare2/issues/4635
https://medium.com/@0x4ndr3/assembly-wrapping-a-new-technique-for-anti-disassembly-c144eb90e036 (see https://reverseengineering.stackexchange.com/questions/1531/what-is-overlapping-instructions-obfuscation also)

貢獻者指南

技術棧: c
領域: security
議題類型: feature
難度: 5
預計時間: over 1 week
活動狀態: stale
清晰度: mostly clear
前置要求: Reverse engineering conceptsradare2 internalsAssembly obfuscation
新手友善度: 10
研究方向: The issue is a meta tracker for implementing antidisassembly trick detection, referencing issues #5136 and #4635, and an external article on assembly wrapping. The research direction involves studying these references, understanding overlapping instructions and other obfuscation techniques, then designing a detection and handling mechanism within radare2's disassembly engine. No active maintainer response or PRs are linked.