Skip to content

v6.0.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Jul 11:46
v6.0.1
5751d27
This commit was signed with the committer’s verified signature.
19h Kenan Sulayman
GPG key ID: DDC207DEF6D7DC80
Verified
Learn about vigilant mode.

Important

Superseded by 6.0.2.

6.0.1 was a bit too strict on the rax runs and the user constantly had to manually run rax exploratory emulation manually.
6.0.2 does that automatically now.

Chernobog 6 is a major release.

New since 5.3.0:

  • rax hybrid engine — bounded, focused-function emulation that materializes runtime strings and projects decoder, branch, memory, and Z3 cross-check evidence into the IDB (see RAX_HYBRID.md)
  • Native pre-lift analysis — early native/Hex-Rays enrichment passes that repair call/pop and get-PC control flow, resolve indirect targets, and fold constants before decompilation
  • Recurrent-switch CFF recovery — encoded recurrent switch dispatchers are classified and rewritten with exact Z3 transition proofs
  • VM-family MBA recovery with exact-Z3 affine reconstruction, plus cross-function Hikari CFG recovery, reversible native opaque-predicate and branch patching, and writable-constant inlining
  • Select/cmov cascade collapse and static XOR/NOT stack-string recovery
  • Multi-database support (PLUGIN_MULTI) — isolated state per open database

Chernobog 6 requires IDA Pro 9.4 (SDK 940); older SDKs are rejected at build time.

Full Changelog: v5.3.0...v6.0.1

Assets 8
Loading