An hopefully generic source-to-source deobfuscator
Explore SourceFu docs »
Table of contents
- Quick start
- Building SourceFu
- Wanna help
- Creators && Contributors
- Copyright and license
SourceFu is a java program aiming at providing in the end a source-to-source deobfuscation framework, based on partial evaluation and compilers middle-front. Especially, the whole process aims at being documented there.
- SourceFu is still in an experimental state. Results might be wrong, tool might as well crash.
- Deobfuscation is an hard subject, the work is huge.
- This project is only developed on my spare time. Any help from you (even simply giving samples on which SourceFu does not work or telling me about syntax errors in this documentation) will be really appreciated!
wget https://github.com/Big5-sec/SourceFu/releases/download/Development/sourcefu-dev-0.01.jar wget https://github.com/Big5-sec/SourceFu/raw/master/tests/VBA/obfuscators/JO-Obfuscator/code.vba java -jar sourcefu-dev-0.01.jar standalone code.vba
Thanks to Gradle, SourceFu is easy to build :
cd SourceFu/sourcefu/ ./gradlew fatJar
The generated jar will be present in
There are plenty of ways to contribute to SourceFu :
the simplest form is to simply show your interest in the project. :)
You are a user who encountered a bug: Please fill in an issue, with the "bug" tag. A bug is encountered when SourceFu crashes, or when SourceFu analysis is wrong. An analysis is wrong when the transformations realized by the tool are not correct. However, if the analysis made by SourceFu is not complete for you, that's not a bug, but more a SourceFu limitation. In this latter case, you should better submit a feature request so that the tool can be improved ;)
You are a user who has some feature request: Please fill in an issue with the "feature" tag. First, make sure that your feature is not already added in the roadmap. If not, your feature will be reviewed. If your feature request is accepted, then it will be added to roadmap, and hopefully developed then :)
You are a infosec developper wanting to integrate more features to SourceFu. Don't hesitate to make some pull requests! However, make sure your code is at least documented (even if the current one is not so well documented :P )
You are a java developper: you can certainly help me to have a better code (syntax, performance, usages, and so on...) Please don't hesitate.
You are a language expert/ANTLR expert: SourceFu works by using ANTLR grammars. You could produce some BNF grammars to extend the supported languages or improve current ones. There are huge improvements that could be done, like working only on AST: should we rewrite the TokenStreamWriter Interface?.
You are a web developper: You can improve the current graphical interface of SourceFu.
You are a graphist: Let's be honest, the current logo is fucking ugly and made on paint. If you can produce a better one, i'm taking it!
You are a scientist: Several open questions remain : Could we determine programatically if comments in a code are relevant or not? How could we rename variables given their usage in the code? How could we improve in general the deobfuscation?
posts, contacts and so on made about SourceFu will be available here.
Creators && contributors
author : Nicolas ZILIO
contributors : empty for now :(