full-disclosure - Re: Java class obfuscation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3EF20EFA.60304@ameritech.net>
From: dbailey27 at ameritech.net (northern snowfall)
Subject: Re: Java class obfuscation

> I was wondering if anyone has any documents compairing the different 
> java class / method obfusction tools that are available.
> I am in particular currious to know about the ones that are very easy 
> to bypass vs. those that are extremely difficult.

You can't obfuscate java interpreted byte code just like
you can't obfuscate CPU machine code. The JVM would have
to be altered to ingest your obfuscated machine code.
Every type of obfuscation can be defeated as soon as it
loads the byte-code into memory for analysis by the JVM.
Thus, you may not have readible byte-code on the disk,
but, you *will* have it in core.

Don

http://www.7f.no-ip.com/~north_