search

0sir1ss / Carbon

[UNMAINTAINED] A Python script to obfuscate and protect your code by renaming classes, functions, variables and remove comments and docstrings.
MIT License
93 stars 12 forks source link

Probably not safe against LLM de-obfuscating #7

Open MartinEls opened 10 months ago

MartinEls commented 10 months ago

Seems like language models do a really decent job in de-obfuscating the generated code (same holds for other obfuscating tools, not Carbon in particular). Didn't test it in all any depth, but GPT-3.5 give great hints when fead with a function from the example folder: https://chat.openai.com/share/0dd8d626-4de1-4de4-af79-d9acbd66c7b5

So, be careful when you use it against important stuff. If larger code bases are used, at least for now, the limited context length of LLMs may give a bit of protection.

nacho00112 commented 6 months ago

It gave the variables' technical purpose, but still didn't recovered the real variable names