obfuscation.md

Obfuscators

Free / Open Source

Tool	Description	Link
Bozar	An open source Java obfuscator.	Source
Caesium	An open source Java obfuscator by sim0n. Offers some neat ZIP file tricks (Auto-patchable in Recaf) among other common JVM obfuscation features.	Source
dProtect	dProtect is an extension of ProGuard adding simple string/flow/arithmetic obfuscation.	Source
JObf	JObf is an open source obfuscator by superblaubeere27.	Source
Proguard	Proguard is one of the most common obfuscators out there. It's one of the oldest and most imporantly, its totally free. It really only supports name obfuscation and not much else. Ironically, you can use it on obfuscated jars to weaken name obfuscation into something more workable.	Proguard - Source
Radon	DISCONTINUED Radon is an open source obfuscator by ItzSomebody.	Source
Scuti	Scuti is an open source obfuscator by netindev.	Source
yGuard	yGuard is similiar to proguard in that its more of a code-shrinker than of an obfuscator.	yGuard - Source

Premium

Tool	Description	Price	Link
Allatori	Allatori is has a free demo with basic obfuscation features. You can't beat free.	Demo: Free Full: $290+	Allatori
Binscure	DISCONTINUED Binscure offers standard obfuscation features (Except renaming) plus decompiler/ASM crashing capabilities (Auto-patchable in Recaf). Flow control crashes most decompilers.	Full: 75£+ (Crypto only) Free (development ended)	Binscure
Bisguard	Bisguard is a Java packer. It wraps a jar file in a launcher protecting the original only with a simple XOR cipher. The reviews on the site are hilarious considering how little this protects applications.	Full: $1200	Bisguard
Branchlock	A web based obfuscator for Java and Android. Offers standard obfuscation features plus decompiler crashing tools (Auto-patchable in Recaf)	Full: €64+	Branchlock
DashO	DashO is a step above Allatori in almost every department. The flow obfuscation is more noticeable than in some other obfuscators, the string encryption is more dynamic, and it has more features overall.	Trial: 1 Week Full: Varies, ~$2000	DashO
Dexguard	Dexguard is an Android application obfuscator, supports all the common features plus a few extra Android-specific abilities.	Full: Varies	Dexguard
DexProtector	DexProtector is another Android application obfuscator made by Licel (developers of Stringer).	Demo: Requires company verification Full: Varies	DexProtector
ESkid	DISCONTINUED Similar to binscure/paramorphism in terms of features. Offers decompiler/ASM crashers (Auto-patchable in Recaf)	Full: $75+	ESkid
Excelsior JET	DISCONTINUED Technically not an obfuscator, as it is actually an ahead-of-time compiler. Still, reversing native code is effectively obfuscation in comparison to reversing java code.	Full: $3,000 Personal: Conditionally free	Excelsior JET
Jfuscator	Aside from the fact that it can't support anything past Java 7, its about on par with DashO. String obfuscation is dynamic enough to basic skids. Flow obfuscation works, but isn't that strong.	Demo: Free 2 weeks Full: $599 + (optional $195 support)	Jfuscator
JNIC	Maps method bodies to JNI generated code that is bundled with your jar. Useful to deter skids who can't open IDA and map out JNI structs.	Full: Varies (£150+)	jnic
Paramorphism	Paramorphism utilizes ZIP file corruption to deter usage of common mainstream reverse-engineering tools. There's also a discord chat.	Full: $80	Paramorphism
Stringer	Stringer is a relatively strong obfuscator. The flow obfuscation on high settings is painful to reverse engineer (Requires minor emulation). It boasts some other neat features others don't have like resource protection and reflection obfuscation. Sadly the cooler features are locked away under the enterprise license which I cannot find any information about online. Just assume it costs an arm and a leg.	Demo: Requires company verification Non-Enterprise: $3,000+ Enterprise: Varies	Stringer
Zelix Klassmaster	Zelix is another great obfuscator. It is an oldie, and their website shows it. Despite the outdated website Zelix is consistently updated and is battle-tested. For the features it gives the smallest license is an absolute steal.	Demo: Free, requires company email Full: $240+	Zelix Klassmaster

Note: "Varies" means that the price is not set in stone and is determined when you ask for a quote through their sales team.

(Back to README)