Tag: vm-protection

• Analyzing and Recovering a Major Company's VM Protection

  2025-04-11

  Recovering a VM-protection bytecode-to-native compiler, mapping virtual instructions back to real ones to de-virtualize the protected code, including the pitfalls and the fix.

• Inside ttEncrypt - Tracing a VM-Protected JNI Cipher Down to SHA-512 and AES

  2025-03-31

  Inside ttEncrypt: tracing a VM-protected JNI cipher down to its SHA-512 and AES primitives, unwrapping the virtualization to recover the algorithm, with the algorithm recovered in detail.

• Emulating an aarch64 Shared Library with Qiling and Reversing Its VM-Protected RC4

  2024-07-25

  Emulating an aarch64 shared library with Qiling and reversing its VM-protected RC4, decrypting the cipher without native hardware, with a full walkthrough of the technique.

• Quickly Locating a VM-Protected Algorithm with Frida Stalker

  2022-10-09

  Quickly locating a VM-protected algorithm with Frida Stalker, using instruction tracing to cut straight through the obfuscation and pinpoint the real logic.