Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add obfuscated boolean field in RBinInfo #7051

Closed
radare opened this issue Mar 17, 2017 · 3 comments
Closed

Add obfuscated boolean field in RBinInfo #7051

radare opened this issue Mar 17, 2017 · 3 comments

Comments

@radare
Copy link
Collaborator

radare commented Mar 17, 2017

This can be easily determined with some checks in RBin, maybe to autodetect if the bin is packed, or the class info obfuscated, etc obviously not 100% reliable, but handy for some use cases

@Maijin
Copy link
Contributor

Maijin commented Mar 17, 2017

Meh I really dislike those tools that display this because it's most of time not accurate and if it's written: Packed then what you still need to understand what it means -> So useless.

@Maijin
Copy link
Contributor

Maijin commented Mar 17, 2017

There is yara and p=e and iS entropy for that

@Maijin
Copy link
Contributor

Maijin commented Mar 17, 2017

One could do a small script that recaps all of the commands that can help determining the obfuscation level but this should go in r2r since it would imply usage of yara.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants