| Name : perl-B-Deobfuscate
| |
| Version : 0.20
| Vendor : obs://build_opensuse_org/devel:languages:perl
|
| Release : lp150.3.2
| Date : 2011-04-14 14:00:00
|
| Group : Development/Libraries/Perl
| Source RPM : perl-B-Deobfuscate-0.20-lp150.3.2.src.rpm
|
| Size : 0.04 MB
| |
| Packager : (none)
| |
| Summary : B::Deobfuscate Perl module
|
Description :
B::Deobfuscate is a backend module for the Perl compiler that generates
perl source code, based on the internal compiled structure that perl itself
creates after parsing a program. It adds symbol renaming functions to the
the B::Deparse manpage module. An obfuscated program is already parsed and
interpreted correctly by the the B::Deparse manpage program. Unfortunately,
if the obfuscation involved variable renaming then the resulting program
also has obfuscated symbols.
This module takes the last step and fixes names like $z5223ed336 to be a
word from a dictionary. While the name still isn\'t meaningful it is at
least easier to distinguish and read. Here are two examples - one from the
B::Deparse manpage and one from B::Deobfuscate.
Initial input
if(AATTz6a703c020a){(my($z5a5fa8125d,$zcc158ad3e0)=File::Temp::tempfile(
\'UNLINK\',1));print($z5a5fa8125d \"=over 8\
\
\");(print($z5a5fa8125d
AATTz6a703c020a)or die((((\"Can\'t print $zcc158ad3e0: $!\"))); print($z5a5fa8125d
\"=back\
\");(close(*$z5a5fa8125d)or die((((\"Can\'t close \".*$za5fa8125d.\": $!\")
));(AATTz8374cc586e=$zcc158ad3e0);($z9e5935eea4=1);}
After the B::Deparse manpage:
if (AATTz6a703c020a) {
(my($z5a5fa8125d, $zcc158ad3e0) = File::Temp::tempfile(\'UNLINK\', 1));
print($z5a5fa8125d \"=over 8\
\
\");
(print($z5a5fa8125d AATTz6a703c020a)
or die((((q[Can\'t print ] . $zcc158ad3e0) . \': \') . $!)));
print($z5a5fa8125d \"=back\
\");
(close(*$z5a5fa8125d)
or die((((q[Can\'t close ] . *$za5fa8125d) . \': \' . $!)));
(AATTz8374cc586e = $zcc158ad3e0);
($z9e5935eea4 = 1);
}
After B::Deobfuscate:
if (AATTparenthesises) {
(my($scrupulousity, $postprocesser) = File::Temp::tempfile(\'UNLINK\', 1));
print($scrupulousity \"=over 8\
\
\");
(print($scrupulousity AATTparenthesises)
or die((((q[Can\'t print ] . $postprocesser) . \': \') . $!)));
print($scrupulousity \"=back\
\");
(close(*$scrupulousity)
or die((((q[Can\'t close ] . *$postprocesser) . \': \') . $!)));
(AATTinterruptable = $postprocesser);
($propagandaist = 1);
}
You\'ll note that the only real difference is that instead of variable names
like $z9e5935eea4 you get $propagandist.
|
RPM found in directory: /packages/linux-pbone/ftp5.gwdg.de/pub/opensuse/repositories/devel:/languages:/perl/openSUSE_Leap_15.0/noarch |
Hmm ... It's impossible ;-) This RPM doesn't exist on any FTP server
Provides :
perl(B::Deobfuscate)
perl(B::Deobfuscate::Dict::Flowers)
perl(B::Deobfuscate::Dict::PGPHashWords)
perl-B-Deobfuscate
Requires :
