search

rpappa / no-pooky

automatically reverse pooky
33 stars 7 forks source link

i got a pooky bypass #6

Open pinyugi opened 4 years ago

pinyugi commented 4 years ago

I have been working pretty hard on taking the information from your repo, and expanding it onto my own pooky bypass. I started by deobfuscating jscrambler protection on pooky, piece by piece.

Let me know what you think of my journey so far.

https://botting.rocks/blog/my-journey-deobfuscating-pooky/

Again, you did a wonderful job providing this info to a lot of us. Great work!

rpappa commented 4 years ago

That's cool. I like the idea of modeling the control flow with graphs (as I learned them in discrete, state machines). I'm interested to see how far you got with deobfuscation.

pinyugi commented 4 years ago

I'm having Part 3 coming up soon next month. Eventually I will get to the part of how I used cytoscapeJS to find the edges and nodes of all the States and finding out the structures such as: If Then, If Then Else, While Loops, and the rare Do While Loops.

Trying to post at least 1 every 7-10 days, and move to the other parts of Pooky like the evals, masking vars, finding they key offsets and much more.