Romain THOMAS

It's a pleasure to announce the release of open-obfuscator: a free and open-source solution for obfuscating Android and iOS applications (Java/Kotlin, C/C++/Objective-C) romainthomas.fr/post/22-10-ope… obfuscator.re

👀👀👀👀

Extracting liblockdown.dylib from visionOS dyld shared cache and running it with a DBI on macOS? Challenge accepted! 📖 Blog: romainthomas.fr/post/24-09-app… 🎞️ Demo: youtube.com/watch?v=5L05OE… ⌨️ Code: github.com/romainthomas/v…

The unauthorized use of our SEO keyword "The #1 App shielding solution" can significantly impact our business by [...]

"By providing these tools and methods, these repositories compromise the security and integrity of applications protected by xxxx, causing potential harm to users and developers relying on our technology for protection."

Funny DMCA that worth reading : github.com/github/dmca/bl… "... is a leading mobile application security solution that provides comprehensive protection..." [...] later on The accused projects, available at <> are specifically designed to bypass (all) advanced security measures

@angealbertini @netspooky This will allocate 0x1000 free bytes right after the PHDR table.

@angealbertini @netspooky If your binary is PIE, you can try with:

Is there a standard tool to make a lot of room in the header of an *arbitrary* ELF (merging segments...) ? cc @netspooky @rh0main

LIEF 0.15.0 is released! You can checkout lief.re/blog/2024-07-2… for the details.

There is an new "extended" version of LIEF which exposes API to inspect ObjC metadata, DWARF & PDB (based on LLVM). If you want to beta-test this version, you can ping extended@lief.re - lief.re/doc/latest/ext… - extended.lief.re

Looks great! Thank you for this long-waiting bindings

LIEF Rust bindings updates: documentation, PE authenticode, ... lief.re/blog/2024-06-1…

LIEF Rust bindings are now supported for iOS and Linux ARM64! This means that the bindings for these platforms can be used with cargo [cross-]compilation: $ cargo build --target=<aarch64-apple-ios|aarch64-unknown-linux-gnu>

I'm pleased to announce that LIEF's Rust bindings are out: lief.re/blog/2024-04-2…

@jduck This will be part of the blog post :)

@rh0main I think everyone would love to hear more details about the journey

Long journey but worth it :)

LIEF v0.14.0 is out! lief-project.github.io/blog/2024-01-2…

WhiteBox Cryptanalysis Christmas has come early this year and it brought a gift: Introducing Blue Galaxy Energy by @doegox and Nicolas Subayrole, the first open source implementation of the BGE attack that turns 20 years old in 2024. blog.quarkslab.com/blue-galaxy-en…

For sure Apple can prevent application to be released with the IR but I doubt they will prevent its usage before the link stage (which is usually where it matters for IR-based obfuscation). Thank you for this blog post 👏

(1/2) It's great to see this kind of blog post after all the storm of communication about XCode 15 bitcode removable (and the misunderstanding about what it really removed).

@quarkslab @_barbhack_ github.com/lief-project/L…

The @_barbhack_ conference is around the corner, and we are happy to announce that we are giving away three tickets! Interested? Answer this tweet by pointing out your all-time favorite Quarkslab tool. Don't miss out, first come, first served! #enjoy