ollvm

An OLLVM-CFF Deobfuscation Plugin

使用Binary Ninja去除ollvm流程平坦混淆

D810-ng (Next Generation) is an updated, tested, refactored, and optimized IDA Pro plugin used to deobfuscate code at decompilation time by modifying IDA Pro microcode.

An arm32 ollvm like deofuscator,aim to remove obfuscation made by ollvm like compiler

break ollvm.

LLMs have ended reverse engineering as a high-barrier skill. Case study: reconstructing 6/7 custom HTTP signing parameters of Douyin (TikTok CN) v38.1.0 native library in 30 days using Claude Opus. 大型语言模型（LLMs）已经终结了“逆向工程是一项高门槛技能”的时代。案例研究：使用 Claude Opus，在 30 天内成功还原抖音（中国版 TikTok）v38.1.0 原生库中 7 个自定义 HTTP 签名参数中的 6 个。

去除BR混淆 Deobfuscation BR

deobfuscator llvm arm64 script

Use binaryninja workflow to deflat ollvm cff

deollvm arm64 based unicorn

Shifting.Codes

"ollvm-unflattener" is a tool designed to reverse the flattening process used by some LLVM obfuscators to make code harder to analyze. It allows users to restore the original structure of the code for easier understanding and manipulation.