PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Obfuscating Java bytecode with LLVM and Epona

blog.quarkslab.com | research | #java | #reverse-engineering | #obfuscation | #llvm | #bytecode | #epona
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

An internship project testing whether Java bytecode can be round-tripped through LLVM IR to reuse Epona's opt-in obfuscation passes; covers the approach, advantages, limitations and examples.
Published
Collected

Related coverage

research · blog.quarkslab.com
Turning Regular Code Into Atrocities With LLVM
Hands-on introduction to LLVM bytecode obfuscation: an out-of-tree pass that replaces null literals with a provably-false boolean expression, teaching LLVM pass development basics along the way.
research · blog.quarkslab.com
How to write your first obfuscator of Java Bytecode
Quarkslab's walkthrough on writing a first Java bytecode obfuscator: Java bytecode and ASM library background, then implementing opaque predicates, based on a 2023 interview challenge.
research · blog.quarkslab.com
goto llvm_dev_meeting;
Announcement: Quarkslab's compiler crew is off to the LLVM Developer Meeting in California, presenting an out-of-tree LLVM pass tutorial and a lightning talk on bytecode obfuscation.
research · blog.quarkslab.com
Turning Regular Code Into Atrocities With LLVM: The Return
LLVM obfuscation tutorial, part two: a pass that hides XOR operations by converting operands from base 2 to base 3 before adding them, turning a simple xor into a much harder-to-recognise sequence.
research · blog.quarkslab.com
Building an obfuscated Python interpreter: we need more opcodes
Obfuscated CPython beyond opcode permutation: modifying the peephole optimizer to add combined instructions like LOAD_FAST_ZERO_LOAD_CONST, forcing attackers to study the evaluation loop.
research · volexity.com
Go Get ‘Em: Updates to Volexity Golang Tooling
# Go Get ‘Em: Updates to Volexity Golang Tooling August 11, 2025 Ivan Mladenov _This blog post was the final deliverable for asummer internship project, which was completed under the direction of...
Back