LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)
-   -   obfuscation ELF (https://www.linuxquestions.org/questions/linux-software-2/obfuscation-elf-4175625953/)

sasas123 03-20-2018 12:21 PM
obfuscation ELF
 
Hey

Tell the obfuscator or packer for ARM ELF ?

In advance I apologize if not there created a subject.

TB0ne 03-20-2018 12:50 PM
Quote:
Originally Posted by sasas123 (Post 5833238)
Hey
Tell the obfuscator or packer for ARM ELF ? In advance I apologize if not there created a subject.
Sorry, but your question makes absolutely no sense as written. What are you trying to ask???

sasas123 03-20-2018 01:23 PM
TB0ne

Sorry, I'm not good at speaking English.

Is there any normal working obfuscators for Elf files ?

TB0ne 03-20-2018 01:24 PM
Quote:
Originally Posted by sasas123 (Post 5833264)
TB0ne
Sorry, I'm not good at speaking English. Is there any normal working obfuscators for Elf files ?
ELF files are compiled programs. They don't need to be obfuscated. What is your goal here, and what version/distro of Linux are you using?

sasas123 03-20-2018 01:37 PM
TB0ne

I Use Ubuntu 16.04.4 LTS https://www.ubuntu.com/download/desktop

ELF files you can compare and find out all you need.

Here on this and need protection obfuscation or packing elf.

Info ELF

ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked

TB0ne 03-20-2018 02:22 PM
Quote:
Originally Posted by sasas123 (Post 5833271)
TB0ne
I Use Ubuntu 16.04.4 LTS

ELF files you can compare and find out all you need. Here on this and need protection obfuscation or packing elf. Info ELF ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked
Again, what is your GOAL??? What are you trying to accomplish? An ELF executable is a compiled program...finding out it is compiled, dynamically linked, etc., still does not expose source code, etc. You cannot 'pack' it/obfuscate it/encrypt it, and still have it work.

A program is a program. If you want 100% security 100% of the time, then never let your program off your computer.

hydrurga 03-20-2018 02:51 PM
Have a look at oplzkwp:

https://github.com/tweksteen/oplzkwp

If you search the internet for linux elf obfuscator you will find other possibilities, such as Burneye, UPX etc., and interesting articles.

sasas123 03-20-2018 03:13 PM
TB0ne

Watch the video please.

Compare ELF https://cloud.mail.ru/public/AkwD/CErS6h6mC

That's what I want to protect my elf file from. From curious users.

Do you understand what I mean ?

hydrurga
Hello

I see oplzkwp It works for build (compiled) ELF file?

Quote:
Modify payload.c to fit your needs. Constraints:

Each function starting with _e_ will be encrypted and decrypted at run-time.

Use decrypt_and_call(next) to call another _e_ function. If the function is currently called (e.g., reentrant), a regular call must be done.

Each functions needs to be page-aligned. (see payload.c and __attribute__((aligned(PAGE_SIZE))).

The final executable must be compiled with -fpie (this is the default if using the Makefile provided).
UPX not work see error please https://cloud.mail.ru/public/4Zik/cXW7JrDV5

How to fix this problem?

Burneye work arm ELF ?

allend 03-20-2018 04:42 PM
I find the spirit of this thread to go against "the main focus of LQ is Linux and Open Source".

TB0ne 03-20-2018 05:01 PM
Quote:
Originally Posted by sasas123 (Post 5833316)
TB0ne
Watch the video please. Compare ELF https://cloud.mail.ru/public/AkwD/CErS6h6mC

That's what I want to protect my elf file from. From curious users. Do you understand what I mean ?
Yes, and I assumed that from the start. And there is ZERO chance of you having success doing it. Microsoft hasn't been able to in decades with billions of dollars; curious users will always poke at things. No matter what you do, period. People will tinker, prod, and poke...and in the end, they will do what you don't want anyway.

Ever watch a DVD on Linux? Yeah...ask around about the DRM crap they spent millions on to prevent 'non licensed' players. Which lasted a short while, before someone wrote a VERY small program that decrypted everything.


All times are GMT -5. The time now is 10:40 PM.