Page-Granular Dynamic Decryption and Lazy Re-encryption in a Windows Packer
Page-granular dynamic decryption and lazy re-encryption in a Windows packer, explaining how it hides code until the moment of execution, so you can reproduce it yourself.
Tag: packer
Unpacking a Numeric-Brand Packer, Bypassing Frida Detection, and Repacking
Unpacking a numeric-brand packer, bypassing its Frida detection, and repacking the app with a valid signature for further analysis, with the tools and offsets documented.
Bypassing an Unusual Anti-Debug & Anti-Hook in a Commercial Mobile-Game Packer
Bypassing an unusual anti-debug and anti-hook in a commercial mobile-game packer, defeating TracerPid and breakpoint detection on ARM64, and the bypass logic broken down.
Deobfuscating libDexHelper.so: Inside an Enterprise Android Shell
Deobfuscating libDexHelper.so inside an enterprise Android shell, defeating its junk instructions, string encryption, and VMP layer with Unicorn and Frida.