移植 OLLVM 到 LLVM 18，C&C++代码混淆

CYRUS-STUDIO · Dec 12, 2024 · ff484ce · ff484ce
1 parent 17ce96d
commit ff484ce
Show file tree

Hide file tree

Showing 15 changed files with 1,932 additions and 140 deletions.
diff --git a/content/posts/移植 OLLVM 到 LLVM 18，C&C++代码混淆.md b/content/posts/移植 OLLVM 到 LLVM 18，C&C++代码混淆.md
diff --git a/public/index.html b/public/index.html
@@ -54,6 +54,23 @@
     <h1>CYRUS STUDIO</h1>
     <ul class="posts-list">
 
+        <li class="posts-list-item">
+          <a class="posts-list-item-title" href="https://cyrus-studio.github.io/blog/posts/%E7%A7%BB%E6%A4%8D-ollvm-%E5%88%B0-llvm-18cc&#43;&#43;%E4%BB%A3%E7%A0%81%E6%B7%B7%E6%B7%86/">移植 OLLVM 到 LLVM 18，C&amp;C&#43;&#43;代码混淆</a>
+          <span class="posts-list-item-description">
+            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-calendar">
+  <title>calendar</title>
+  <rect x="3" y="4" width="18" height="18" rx="2" ry="2"></rect><line x1="16" y1="2" x2="16" y2="6"></line><line x1="8" y1="2" x2="8" y2="6"></line><line x1="3" y1="10" x2="21" y2="10"></line>
+</svg>
+            Dec 13, 2024
+            <span class="posts-list-item-separator">-</span>
+            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-clock">
+  <title>clock</title>
+  <circle cx="12" cy="12" r="10"></circle><polyline points="12 6 12 12 16 14"></polyline>
+</svg>
+            11 min read
+          </span>
+        </li>
+
         <li class="posts-list-item">
           <a class="posts-list-item-title" href="https://cyrus-studio.github.io/blog/posts/%E7%BC%96%E8%AF%91-llvm-%E6%BA%90%E7%A0%81%E4%BD%BF%E7%94%A8-clion-%E8%B0%83%E8%AF%95-clang/">编译 LLVM 源码，使用 Clion 调试 clang</a>
           <span class="posts-list-item-description">
@@ -207,23 +224,6 @@ <h1>CYRUS STUDIO</h1>
           </span>
         </li>
 
-        <li class="posts-list-item">
-          <a class="posts-list-item-title" href="https://cyrus-studio.github.io/blog/posts/%E8%AF%A6%E8%A7%A3arm64%E5%8F%AF%E6%89%A7%E8%A1%8C%E7%A8%8B%E5%BA%8F%E7%9A%84%E7%94%9F%E6%88%90%E8%BF%87%E7%A8%8B/">详解ARM64可执行程序的生成过程</a>
-          <span class="posts-list-item-description">
-            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-calendar">
-  <title>calendar</title>
-  <rect x="3" y="4" width="18" height="18" rx="2" ry="2"></rect><line x1="16" y1="2" x2="16" y2="6"></line><line x1="8" y1="2" x2="8" y2="6"></line><line x1="3" y1="10" x2="21" y2="10"></line>
-</svg>
-            Nov 2, 2024
-            <span class="posts-list-item-separator">-</span>
-            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-clock">
-  <title>clock</title>
-  <circle cx="12" cy="12" r="10"></circle><polyline points="12 6 12 12 16 14"></polyline>
-</svg>
-            6 min read
-          </span>
-        </li>
-
     </ul>
 
 

diff --git a/public/index.xml b/public/index.xml
@@ -6,8 +6,15 @@
     <description>Recent content on CYRUS STUDIO</description>
     <generator>Hugo</generator>
     <language>zh-cn</language>
-    <lastBuildDate>Tue, 10 Dec 2024 22:44:36 +0800</lastBuildDate>
+    <lastBuildDate>Fri, 13 Dec 2024 03:56:00 +0800</lastBuildDate>
     <atom:link href="https://cyrus-studio.github.io/blog/index.xml" rel="self" type="application/rss+xml" />
+    <item>
+      <title>移植 OLLVM 到 LLVM 18，C&amp;C&#43;&#43;代码混淆</title>
+      <link>https://cyrus-studio.github.io/blog/posts/%E7%A7%BB%E6%A4%8D-ollvm-%E5%88%B0-llvm-18cc&#43;&#43;%E4%BB%A3%E7%A0%81%E6%B7%B7%E6%B7%86/</link>
+      <pubDate>Fri, 13 Dec 2024 03:56:00 +0800</pubDate>
+      <guid>https://cyrus-studio.github.io/blog/posts/%E7%A7%BB%E6%A4%8D-ollvm-%E5%88%B0-llvm-18cc&#43;&#43;%E4%BB%A3%E7%A0%81%E6%B7%B7%E6%B7%86/</guid>
+      <description>版权归作者所有，如有转发，请注明文章出处：https://cyrus-studio.github.io/blog/&#xA;OLLVM 简介 OLLVM (Obfuscator-LLVM) 是一个基于 LLVM 的代码混淆工具。&#xA;LLVM 是一个广泛使用的编译器框架，OLLVM 在其基础上提供了多种混淆技术，旨在增加程序逆向分析和反编译的难度，从而提高程序的安全性。&#xA;OLLVM 通过在编译过程中对中间表示（IR）和目标代码应用多种混淆技术，生成更加复杂和难以理解的二进制代码。&#xA;OLLVM 项目地址：https://github.com/obfuscator-llvm/obfuscator&#xA;下载源码 目前最新版本的是分支名为 llvm-4.0，基于 LLVM 团队发布的版本 4.0.1&#xA;最新版本的 LLVM 可以看这里：https://github.com/llvm/llvm-project/releases&#xA;下载 OLLVM 的 llvm-4.0 分支源码到本地&#xA;git clone -b llvm-4.0 https://github.com/obfuscator-llvm/obfuscator.git 构建 OLLVM&#xA;mkdir build&#xD;cd build&#xD;cmake -DCMAKE_BUILD_TYPE=Release ../obfuscator/&#xD;make -j7 OLLVM 项目介绍 obfuscator/&#xD;│&#xD;├── include/llvm/Transforms/Obfuscation # 公共头文件目录&#xD;│ ├── BogusControlFlow.h # 虚假控制流头文件&#xD;│ ├── Flattening.h # 控制流平坦化头文件&#xD;│ ├── Split.h # 基本块拆分头文件&#xD;│ ├── Substitution.</description>
+    </item>
     <item>
       <title>编译 LLVM 源码，使用 Clion 调试 clang</title>
       <link>https://cyrus-studio.github.io/blog/posts/%E7%BC%96%E8%AF%91-llvm-%E6%BA%90%E7%A0%81%E4%BD%BF%E7%94%A8-clion-%E8%B0%83%E8%AF%95-clang/</link>

diff --git a/public/page/2/index.html b/public/page/2/index.html
@@ -54,6 +54,23 @@
     <h1>CYRUS STUDIO</h1>
     <ul class="posts-list">
 
+        <li class="posts-list-item">
+          <a class="posts-list-item-title" href="https://cyrus-studio.github.io/blog/posts/%E8%AF%A6%E8%A7%A3arm64%E5%8F%AF%E6%89%A7%E8%A1%8C%E7%A8%8B%E5%BA%8F%E7%9A%84%E7%94%9F%E6%88%90%E8%BF%87%E7%A8%8B/">详解ARM64可执行程序的生成过程</a>
+          <span class="posts-list-item-description">
+            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-calendar">
+  <title>calendar</title>
+  <rect x="3" y="4" width="18" height="18" rx="2" ry="2"></rect><line x1="16" y1="2" x2="16" y2="6"></line><line x1="8" y1="2" x2="8" y2="6"></line><line x1="3" y1="10" x2="21" y2="10"></line>
+</svg>
+            Nov 2, 2024
+            <span class="posts-list-item-separator">-</span>
+            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-clock">
+  <title>clock</title>
+  <circle cx="12" cy="12" r="10"></circle><polyline points="12 6 12 12 16 14"></polyline>
+</svg>
+            6 min read
+          </span>
+        </li>
+
         <li class="posts-list-item">
           <a class="posts-list-item-title" href="https://cyrus-studio.github.io/blog/posts/%E4%BD%BF%E7%94%A8-frida-%E5%AE%9A%E4%BD%8D-jni-%E6%96%B9%E6%B3%95%E5%86%85%E5%AD%98%E5%9C%B0%E5%9D%80/">使用 Frida 定位 JNI 方法内存地址</a>
           <span class="posts-list-item-description">
@@ -207,23 +224,6 @@ <h1>CYRUS STUDIO</h1>
           </span>
         </li>
 
-        <li class="posts-list-item">
-          <a class="posts-list-item-title" href="https://cyrus-studio.github.io/blog/posts/ida%E9%9D%99%E6%80%81%E5%88%86%E6%9E%90%E4%B8%AD%E4%BC%AA%E4%BB%A3%E7%A0%81%E6%98%BE%E7%A4%BA%E4%BC%98%E5%8C%96/">IDA静态分析中伪代码显示优化</a>
-          <span class="posts-list-item-description">
-            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-calendar">
-  <title>calendar</title>
-  <rect x="3" y="4" width="18" height="18" rx="2" ry="2"></rect><line x1="16" y1="2" x2="16" y2="6"></line><line x1="8" y1="2" x2="8" y2="6"></line><line x1="3" y1="10" x2="21" y2="10"></line>
-</svg>
-            Oct 7, 2024
-            <span class="posts-list-item-separator">-</span>
-            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-clock">
-  <title>clock</title>
-  <circle cx="12" cy="12" r="10"></circle><polyline points="12 6 12 12 16 14"></polyline>
-</svg>
-            1 min read
-          </span>
-        </li>
-
     </ul>
 
 

diff --git a/public/page/3/index.html b/public/page/3/index.html
@@ -54,6 +54,23 @@
     <h1>CYRUS STUDIO</h1>
     <ul class="posts-list">
 
+        <li class="posts-list-item">
+          <a class="posts-list-item-title" href="https://cyrus-studio.github.io/blog/posts/ida%E9%9D%99%E6%80%81%E5%88%86%E6%9E%90%E4%B8%AD%E4%BC%AA%E4%BB%A3%E7%A0%81%E6%98%BE%E7%A4%BA%E4%BC%98%E5%8C%96/">IDA静态分析中伪代码显示优化</a>
+          <span class="posts-list-item-description">
+            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-calendar">
+  <title>calendar</title>
+  <rect x="3" y="4" width="18" height="18" rx="2" ry="2"></rect><line x1="16" y1="2" x2="16" y2="6"></line><line x1="8" y1="2" x2="8" y2="6"></line><line x1="3" y1="10" x2="21" y2="10"></line>
+</svg>
+            Oct 7, 2024
+            <span class="posts-list-item-separator">-</span>
+            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-clock">
+  <title>clock</title>
+  <circle cx="12" cy="12" r="10"></circle><polyline points="12 6 12 12 16 14"></polyline>
+</svg>
+            1 min read
+          </span>
+        </li>
+
         <li class="posts-list-item">
           <a class="posts-list-item-title" href="https://cyrus-studio.github.io/blog/posts/%E5%B8%B8%E8%A7%81%E7%9A%84-256-%E6%9D%A1-dalvik-%E5%AD%97%E8%8A%82%E7%A0%81%E6%8C%87%E4%BB%A4/">常见的 256 条 Dalvik 字节码指令</a>
           <span class="posts-list-item-description">
@@ -207,23 +224,6 @@ <h1>CYRUS STUDIO</h1>
           </span>
         </li>
 
-        <li class="posts-list-item">
-          <a class="posts-list-item-title" href="https://cyrus-studio.github.io/blog/posts/android%E6%BA%90%E7%A0%81%E5%AF%BC%E5%85%A5android-studio/">Android源码导入Android Studio</a>
-          <span class="posts-list-item-description">
-            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-calendar">
-  <title>calendar</title>
-  <rect x="3" y="4" width="18" height="18" rx="2" ry="2"></rect><line x1="16" y1="2" x2="16" y2="6"></line><line x1="8" y1="2" x2="8" y2="6"></line><line x1="3" y1="10" x2="21" y2="10"></line>
-</svg>
-            Sep 15, 2024
-            <span class="posts-list-item-separator">-</span>
-            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-clock">
-  <title>clock</title>
-  <circle cx="12" cy="12" r="10"></circle><polyline points="12 6 12 12 16 14"></polyline>
-</svg>
-            2 min read
-          </span>
-        </li>
-
     </ul>
 
 

diff --git a/public/page/4/index.html b/public/page/4/index.html
@@ -54,6 +54,23 @@
     <h1>CYRUS STUDIO</h1>
     <ul class="posts-list">
 
+        <li class="posts-list-item">
+          <a class="posts-list-item-title" href="https://cyrus-studio.github.io/blog/posts/android%E6%BA%90%E7%A0%81%E5%AF%BC%E5%85%A5android-studio/">Android源码导入Android Studio</a>
+          <span class="posts-list-item-description">
+            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-calendar">
+  <title>calendar</title>
+  <rect x="3" y="4" width="18" height="18" rx="2" ry="2"></rect><line x1="16" y1="2" x2="16" y2="6"></line><line x1="8" y1="2" x2="8" y2="6"></line><line x1="3" y1="10" x2="21" y2="10"></line>
+</svg>
+            Sep 15, 2024
+            <span class="posts-list-item-separator">-</span>
+            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-clock">
+  <title>clock</title>
+  <circle cx="12" cy="12" r="10"></circle><polyline points="12 6 12 12 16 14"></polyline>
+</svg>
+            2 min read
+          </span>
+        </li>
+
         <li class="posts-list-item">
           <a class="posts-list-item-title" href="https://cyrus-studio.github.io/blog/posts/lineageos%E6%BA%90%E7%A0%81%E4%B8%8B%E8%BD%BD%E5%92%8C%E7%BC%96%E8%AF%91xiaomi-mi-6xwayne/">LineageOS源码下载和编译（Xiaomi Mi 6X，wayne）</a>
           <span class="posts-list-item-description">
@@ -207,23 +224,6 @@ <h1>CYRUS STUDIO</h1>
           </span>
         </li>
 
-        <li class="posts-list-item">
-          <a class="posts-list-item-title" href="https://cyrus-studio.github.io/blog/posts/%E6%9C%89%E9%81%93%E4%BA%91docx%E8%BD%AC%E6%8D%A2markdown%E5%AF%BC%E5%85%A5hugo%E5%8F%91%E5%B8%83%E5%88%B0github-page%E5%A4%9A%E5%B9%B3%E5%8F%B0%E5%8F%91%E5%B8%83%E9%80%82%E9%85%8D/">有道云docx转换markdown，导入hugo发布到github page，多平台发布适配</a>
-          <span class="posts-list-item-description">
-            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-calendar">
-  <title>calendar</title>
-  <rect x="3" y="4" width="18" height="18" rx="2" ry="2"></rect><line x1="16" y1="2" x2="16" y2="6"></line><line x1="8" y1="2" x2="8" y2="6"></line><line x1="3" y1="10" x2="21" y2="10"></line>
-</svg>
-            Aug 11, 2024
-            <span class="posts-list-item-separator">-</span>
-            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-clock">
-  <title>clock</title>
-  <circle cx="12" cy="12" r="10"></circle><polyline points="12 6 12 12 16 14"></polyline>
-</svg>
-            7 min read
-          </span>
-        </li>
-
     </ul>
 
 

diff --git a/public/page/5/index.html b/public/page/5/index.html
@@ -54,6 +54,23 @@
     <h1>CYRUS STUDIO</h1>
     <ul class="posts-list">
 
+        <li class="posts-list-item">
+          <a class="posts-list-item-title" href="https://cyrus-studio.github.io/blog/posts/%E6%9C%89%E9%81%93%E4%BA%91docx%E8%BD%AC%E6%8D%A2markdown%E5%AF%BC%E5%85%A5hugo%E5%8F%91%E5%B8%83%E5%88%B0github-page%E5%A4%9A%E5%B9%B3%E5%8F%B0%E5%8F%91%E5%B8%83%E9%80%82%E9%85%8D/">有道云docx转换markdown，导入hugo发布到github page，多平台发布适配</a>
+          <span class="posts-list-item-description">
+            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-calendar">
+  <title>calendar</title>
+  <rect x="3" y="4" width="18" height="18" rx="2" ry="2"></rect><line x1="16" y1="2" x2="16" y2="6"></line><line x1="8" y1="2" x2="8" y2="6"></line><line x1="3" y1="10" x2="21" y2="10"></line>
+</svg>
+            Aug 11, 2024
+            <span class="posts-list-item-separator">-</span>
+            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-clock">
+  <title>clock</title>
+  <circle cx="12" cy="12" r="10"></circle><polyline points="12 6 12 12 16 14"></polyline>
+</svg>
+            7 min read
+          </span>
+        </li>
+
         <li class="posts-list-item">
           <a class="posts-list-item-title" href="https://cyrus-studio.github.io/blog/posts/0%E6%88%90%E6%9C%AC%E9%80%9A%E8%BF%87hugo%E5%92%8Cgithub-pages%E6%90%AD%E5%BB%BA%E5%8D%9A%E5%AE%A2/">0成本通过Hugo和GitHub Pages搭建博客</a>
           <span class="posts-list-item-description">

diff --git a/public/posts/index.html b/public/posts/index.html
@@ -54,6 +54,23 @@
     <h1>Posts</h1>
     <ul class="posts-list">
 
+        <li class="posts-list-item">
+          <a class="posts-list-item-title" href="https://cyrus-studio.github.io/blog/posts/%E7%A7%BB%E6%A4%8D-ollvm-%E5%88%B0-llvm-18cc&#43;&#43;%E4%BB%A3%E7%A0%81%E6%B7%B7%E6%B7%86/">移植 OLLVM 到 LLVM 18，C&amp;C&#43;&#43;代码混淆</a>
+          <span class="posts-list-item-description">
+            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-calendar">
+  <title>calendar</title>
+  <rect x="3" y="4" width="18" height="18" rx="2" ry="2"></rect><line x1="16" y1="2" x2="16" y2="6"></line><line x1="8" y1="2" x2="8" y2="6"></line><line x1="3" y1="10" x2="21" y2="10"></line>
+</svg>
+            Dec 13, 2024
+            <span class="posts-list-item-separator">-</span>
+            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-clock">
+  <title>clock</title>
+  <circle cx="12" cy="12" r="10"></circle><polyline points="12 6 12 12 16 14"></polyline>
+</svg>
+            11 min read
+          </span>
+        </li>
+
         <li class="posts-list-item">
           <a class="posts-list-item-title" href="https://cyrus-studio.github.io/blog/posts/%E7%BC%96%E8%AF%91-llvm-%E6%BA%90%E7%A0%81%E4%BD%BF%E7%94%A8-clion-%E8%B0%83%E8%AF%95-clang/">编译 LLVM 源码，使用 Clion 调试 clang</a>
           <span class="posts-list-item-description">
@@ -207,23 +224,6 @@ <h1>Posts</h1>
           </span>
         </li>
 
-        <li class="posts-list-item">
-          <a class="posts-list-item-title" href="https://cyrus-studio.github.io/blog/posts/%E8%AF%A6%E8%A7%A3arm64%E5%8F%AF%E6%89%A7%E8%A1%8C%E7%A8%8B%E5%BA%8F%E7%9A%84%E7%94%9F%E6%88%90%E8%BF%87%E7%A8%8B/">详解ARM64可执行程序的生成过程</a>
-          <span class="posts-list-item-description">
-            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-calendar">
-  <title>calendar</title>
-  <rect x="3" y="4" width="18" height="18" rx="2" ry="2"></rect><line x1="16" y1="2" x2="16" y2="6"></line><line x1="8" y1="2" x2="8" y2="6"></line><line x1="3" y1="10" x2="21" y2="10"></line>
-</svg>
-            Nov 2, 2024
-            <span class="posts-list-item-separator">-</span>
-            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon icon-clock">
-  <title>clock</title>
-  <circle cx="12" cy="12" r="10"></circle><polyline points="12 6 12 12 16 14"></polyline>
-</svg>
-            6 min read
-          </span>
-        </li>
-
     </ul>