open-obfuscator / o-mvll Goto Github PK

Using O-MVLL with Xcode is a bit easier than Android since we don’t need to deal with different libstdc++/libc++. To enable O-MVLL, one needs to go to:

Build Settings > Apple Clang - Custom Compiler Flags > Other C/C++ Flags

and add -fpass-plugin=<path>/omvll_xcode_14.dylib. We also need to disable the legacy pass manager with: -fno-legacy-pass-manager.

Finally, we can create an omvll.yml file next to the *.xcodeproj file which defines OMVLL_PYTHONPATH and OMVLL_CONFIG.

Et voila :)

Crashed Thread:        0  Dispatch queue: com.apple.main-thread

Exception Type:        EXC_BAD_ACCESS (SIGKILL (Code Signature Invalid))
Exception Codes:       UNKNOWN_0x32 at 0x0000000118000000
Exception Codes:       0x0000000000000032, 0x0000000118000000

void testx(){
    int i=0;
    while(1){   
       i++;
    }
}

def obfuscate_constants(self, _, __):
    if "testx" in str(__.name):
        return True
    return False

> Run curl -LO https://data.romainthomas.fr/omvll-deps-xcode-14.tar
  ...
  curl: (92) HTTP/2 stream 0 was not closed cleanly: PROTOCOL_ERROR (err 1)
  Error: Process completed with exit code 92.

"/home/mac/Android/Sdk/ndk/25.0.8775105/toolchains/llvm/prebuilt/linux-x86_64/bin/clang++"

Change Dir: /home/mac/AndroidStudioProjects/butterFly/app/.cxx/Debug/4z1w3t4m/arm64-v8a/CMakeFiles/CMakeTmp

Run Build Command(s):/home/mac/Android/Sdk/cmake/3.18.1/bin/ninja cmTC_54545 && [1/2] Building CXX object CMakeFiles/cmTC_54545.dir/testCXXCompiler.cxx.o
FAILED: CMakeFiles/cmTC_54545.dir/testCXXCompiler.cxx.o 
/home/mac/Android/Sdk/ndk/25.0.8775105/toolchains/llvm/prebuilt/linux-x86_64/bin/clang++ --target=aarch64-none-linux-android21 --sysroot=/home/mac/Android/Sdk/ndk/25.0.8775105/toolchains/llvm/prebuilt/linux-x86_64/sysroot   -g -DANDROID -fdata-sections -ffunction-sections -funwind-tables -fstack-protector-strong -no-canonical-prefixes -D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security  -fpass-plugin=/home/mac/Desktop/omvll_ndk_r25.so  -fPIE -MD -MT CMakeFiles/cmTC_54545.dir/testCXXCompiler.cxx.o -MF CMakeFiles/cmTC_54545.dir/testCXXCompiler.cxx.o.d -o CMakeFiles/cmTC_54545.dir/testCXXCompiler.cxx.o -c testCXXCompiler.cxx
error: ModuleNotFoundError: No module named 'omvll-config'
ninja: build stopped: subcommand failed.

Apple clang version 14.0.0 (clang-1400.0.29.202)
Target: arm64-apple-darwin22.1.0
Thread model: posix
InstalledDir: /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin
 "/Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/clang" -cc1 -triple arm64-apple-ios16.1.0 -Wundef-prefix=TARGET_OS_ -Wdeprecated-objc-isa-usage -Werror=deprecated-objc-isa-usage -Werror=implicit-function-declaration -emit-obj -mrelax-all --mrelax-relocations -disable-free -clear-ast-before-backend -disable-llvm-verifier -discard-value-names -main-file-name main.c -mrelocation-model pic -pic-level 2 -mframe-pointer=non-leaf -fno-strict-return -fno-rounding-math -funwind-tables=2 -fobjc-msgsend-selector-stubs -target-sdk-version=16.1 -fvisibility-inlines-hidden-static-local-var -target-cpu apple-a7 -target-feature +fp-armv8 -target-feature +neon -target-feature +crypto -target-feature +zcm -target-feature +zcz -target-feature +sha2 -target-feature +aes -target-abi darwinpcs -fallow-half-arguments-and-returns -debugger-tuning=lldb -target-linker-version 820.1 -v -resource-dir /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/lib/clang/14.0.0 -isysroot /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS16.1.sdk -internal-isystem /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS16.1.sdk/usr/local/include -internal-isystem /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/lib/clang/14.0.0/include -internal-externc-isystem /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS16.1.sdk/usr/include -internal-externc-isystem /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/include -Wno-reorder-init-list -Wno-implicit-int-float-conversion -Wno-c99-designator -Wno-final-dtor-non-final-class -Wno-extra-semi-stmt -Wno-misleading-indentation -Wno-quoted-include-in-framework-header -Wno-implicit-fallthrough -Wno-enum-enum-conversion -Wno-enum-float-conversion -Wno-elaborated-enum-base -Wno-reserved-identifier -Wno-gnu-folding-constant -Wno-cast-function-type -Wno-bitwise-instead-of-logical -fdebug-compilation-dir=/Users/dev/obf -ferror-limit 19 -stack-protector 1 -fstack-check -mdarwin-stkchk-strong-link -fblocks -fencode-extended-block-signature -fregister-global-dtors-with-atexit -fgnuc-version=4.2.1 -fno-legacy-pass-manager -fmax-type-align=16 -fcommon -fcolor-diagnostics -fpass-plugin=/Users/dev/obf/omvll_xcode_14.dylib -clang-vendor-feature=+messageToSelfInClassMethodIdReturnType -clang-vendor-feature=+disableInferNewAvailabilityFromInit -clang-vendor-feature=+disableNonDependentMemberExprInCurrentInstantiation -fno-odr-hash-protocols -clang-vendor-feature=+enableAggressiveVLAFolding -clang-vendor-feature=+revert09abecef7bbf -clang-vendor-feature=+thisNoAlignAttr -clang-vendor-feature=+thisNoNullAttr -mllvm -disable-aligned-alloc-awareness=1 -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /var/folders/cv/x7j5p4yd36vd55sbvk0m3l9h0000gn/T/main-8e223f.o -x c main.c
clang -cc1 version 14.0.0 (clang-1400.0.29.202) default target arm64-apple-darwin22.1.0
ignoring nonexistent directory "/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS16.1.sdk/usr/local/include"
ignoring nonexistent directory "/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS16.1.sdk/Library/Frameworks"
#include "..." search starts here:
#include <...> search starts here:
 /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/lib/clang/14.0.0/include
 /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS16.1.sdk/usr/include
 /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/include
 /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS16.1.sdk/System/Library/Frameworks (framework directory)
End of search list.
clang: error: unable to execute command: Killed: 9
clang: error: clang frontend command failed due to signal (use -v to see invocation)
Apple clang version 14.0.0 (clang-1400.0.29.202)
Target: arm64-apple-darwin22.1.0
Thread model: posix
InstalledDir: /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin
clang: note: diagnostic msg: 
********************

PLEASE ATTACH THE FOLLOWING FILES TO THE BUG REPORT:
Preprocessed source(s) and associated run script(s) are located at:
clang: note: diagnostic msg: /var/folders/cv/x7j5p4yd36vd55sbvk0m3l9h0000gn/T/main-4e6f4d.c
clang: note: diagnostic msg: /var/folders/cv/x7j5p4yd36vd55sbvk0m3l9h0000gn/T/main-4e6f4d.sh
clang: note: diagnostic msg: Crash backtrace is located in
clang: note: diagnostic msg: /Users/dev/Library/Logs/DiagnosticReports/clang_<YYYY-MM-DD-HHMMSS>_<hostname>.crash
clang: note: diagnostic msg: (choose the .crash file that corresponds to your crash)
clang: note: diagnostic msg: 

********************

o-mvll/src/test/passes/strings-encoding/basic-aarch64.cpp:29:24: error: CHECK-REPLACED-NOT: excluded string found in input
// CHECK-REPLACED-NOT: [[FILE_NAME]]
                       ^
<stdin>:33:3: note: found here
l_o-mvll/src/test/passes/strings-encoding/basic-aarch64.cpp:.str.2
  ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
<stdin>:33:3: note: with "FILE_NAME" equal to "o-mvll/src/test/passes/strings-encoding/basic-aarch64\\.cpp"
l_o-mvll/src/test/passes/strings-encoding/basic-aarch64.cpp:.str.2
  ^

#include <stdio.h>
#include <sys/types.h>
#include <unistd.h>
#include <sys/sysctl.h>
#include <stdlib.h>

int is_debugger_present(void)
{
    int name[4];
    struct kinfo_proc info;
    size_t info_size = sizeof(info);

    info.kp_proc.p_flag = 0;
    name[0] = CTL_KERN;
    name[1] = KERN_PROC;
    name[2] = KERN_PROC_PID;
    name[3] = getpid();

    if (sysctl(name, 4, &info, &info_size, NULL, 0) == -1) {
        perror("sysctl");
        exit(-1);
    }
    return ((info.kp_proc.p_flag & P_TRACED) != 0);
}

int main(){
    is_debugger_present();
    return 0;
}

import omvll
import os
from functools import lru_cache


class MyConfig(omvll.ObfuscationConfig):
    def __init__(self):
        super().__init__()

    def flatten_cfg(self, mod: omvll.Module, func: omvll.Function):
        if func.name == "is_debugger_present":
            return True
        return False
    
@lru_cache(maxsize=1)
def omvll_get_config() -> omvll.ObfuscationConfig:
    """
    Return an instance of `ObfuscationConfig` which
    aims at describing the obfuscation scheme
    """
    return MyConfig()

clang -fpass-plugin=omvll_xcode_14.dylib utils.c -o main
clang: error: unable to execute command: Segmentation fault: 11
clang: error: clang frontend command failed due to signal (use -v to see invocation)
Apple clang version 14.0.3 (clang-1403.0.22.14.1)
Target: arm64-apple-darwin22.6.0
Thread model: posix
InstalledDir: /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin
clang: note: diagnostic msg: 
********************

PLEASE ATTACH THE FOLLOWING FILES TO THE BUG REPORT:
Preprocessed source(s) and associated run script(s) are located at:
clang: note: diagnostic msg: /var/folders/g_/y9nmb9t11lv5bdyscrcfwlg80000gn/T/utils-c2f326.c
clang: note: diagnostic msg: /var/folders/g_/y9nmb9t11lv5bdyscrcfwlg80000gn/T/utils-c2f326.sh
clang: note: diagnostic msg: Crash backtrace is located in
clang: note: diagnostic msg: /Users/gitlab/Library/Logs/DiagnosticReports/clang_<YYYY-MM-DD-HHMMSS>_<hostname>.crash
clang: note: diagnostic msg: (choose the .crash file that corresponds to your crash)
clang: note: diagnostic msg: 

  Could not find a package configuration file provided by "LLVM" with any of
  the following names:
    LLVMConfig.cmake
    llvm-config.cmake
  Add the installation prefix of "LLVM" to CMAKE_PREFIX_PATH or set "LLVM_DIR"

[36/36] Linking CXX shared library ../arm64-v8a.so
FAILED: ../arm64-v8a.so
: && /home/ryuu/android/cmake/3.22.1/bin/cmake -E time /home/ryuu/android/ndk/25.0.8775105//toolchains/llvm/prebuilt/linux-x86_64/bin/clang++ --target=aarch64-none-linux-android23 -fPIC -DANDROID -fdata-sections -ffunction-sections -funwind-tables -fstack-protector-strong -no-canonical-prefixes -D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security -fexceptions -frtti -stdlib=libc++ -Wno-deprecated -fvisibility=hidden -Ofast -fvisibility-inlines-hidden -fno-exceptions -fno-rtti -fno-unroll-loops -flto=thin -fno-unroll-loops -Xclang -fmerge-functions -fpass-plugin=/mnt/c/Users/ryuu/CLionProjects/untitled8/omvll_ndk_r25c.so  -O3 -DNDEBUG  -Wl,--build-id=sha1 -Wl,--no-rosegment -Wl,--fatal-warnings -Wl,--gc-sections -Qunused-arguments -Wl,--no-undefined -ffixed-x18 --no-undefined -s -shared -Wl,-soname,arm64-v8a.so -o ../arm64-v8a.so CMakeFiles/redacted.dir/src/main.cpp.o *redacted libraries*  -landroid  -lGLESv3  -lEGL  -llog   -static-libstdc++ -latomic -lm && cd /mnt/c/Users/ryuu/CLionProjects/untitled8/cmake-build-release && /home/ryuu/android/ndk/25.0.8775105/toolchains/llvm/prebuilt/linux-x86_64/bin/llvm-strip --discard-all --discard-locals --strip-all --strip-unneeded /mnt/c/Users/ryuu/CLionProjects/untitled8/arm64-v8a.so
ld: error: ignoring debug info with an invalid version (0) in CMakeFiles/redacted.dir/dependencies/imgui/imgui_draw.cpp.o
ld: error: ignoring debug info with an invalid version (0) in CMakeFiles/redacted.dir/src/sdk/sdk.cpp.o
ld: error: ignoring debug info with an invalid version (0) in CMakeFiles/redacted.dir/src/render/render.cpp.o
ld: error: ignoring debug info with an invalid version (0) in CMakeFiles/redacted.dir/dependencies/imgui/imgui.cpp.o
ld: error: ignoring debug info with an invalid version (0) in CMakeFiles/redacted.dir/dependencies/imgui/imgui.cpp.o
ld: error: ignoring debug info with an invalid version (0) in CMakeFiles/redacted.dir/dependencies/imgui/imgui_draw.cpp.o
ld: error: ignoring debug info with an invalid version (0) in CMakeFiles/redacted.dir/dependencies/imgui/imgui_draw.cpp.o
ld: error: ignoring debug info with an invalid version (0) in CMakeFiles/redacted.dir/src/render/backends/imgui_impl_opengl3.cpp.o
ld: error: ignoring debug info with an invalid version (0) in CMakeFiles/redacted.dir/src/render/render.cpp.o
ld: error: ignoring debug info with an invalid version (0) in CMakeFiles/redacted.dir/dependencies/imgui/imgui_demo.cpp.o
ld: error: ignoring debug info with an invalid version (0) in CMakeFiles/redacted.dir/src/sdk/sdk.cpp.o
ld: error: ignoring debug info with an invalid version (0) in CMakeFiles/redacted.dir/src/main.cpp.o
ld: error: too many errors emitted, stopping now (use -error-limit=0 to see all errors)
clang++: error: linker command failed with exit code 1 (use -v to see invocation)
Elapsed time: 0 s. (time), 0.000907 s. (clock)
ninja: build stopped: subcommand failed.

android {
    ndkVersion "25.0.8775105"
    compileSdk 34

    defaultConfig {
        minSdk 27
        targetSdk 34

        ndk {
            abiFilters 'arm64-v8a'
        }
        externalNativeBuild {
            cmake {
                cppFlags '-fpass-plugin=/home/ubuntu/Android/Sdk/ndk/25.2.9519653/toolchains/llvm/prebuilt/linux-x86_64/lib64/omvll_ndk_r25c.so'
                cFlags   '-fpass-plugin=/home/ubuntu/Android/Sdk/ndk/25.2.9519653/toolchains/llvm/prebuilt/linux-x86_64/lib64/omvll_ndk_r25c.so'
            }
        }
    }
}

The output was:
1
No available targets are compatible with triple "aarch64-none-linux-android27"


Compiling the CXX compiler identification source file "CMakeCXXCompilerId.cpp" failed.
Compiler: /home/ubuntu/Android/Sdk/ndk/25.0.8775105/toolchains/llvm/prebuilt/linux-x86_64/bin/clang++ 
Build flags: -g;-DANDROID;-fdata-sections;-ffunction-sections;-funwind-tables;-fstack-protector-strong;-no-canonical-prefixes;-D_FORTIFY_SOURCE=2;-Wformat;-Werror=format-security;;-fpass-plugin=/home/ubuntu/Android/Sdk/ndk/25.2.9519653/toolchains/llvm/prebuilt/linux-x86_64/lib64/omvll_ndk_r25c.so
Id flags:  

The output was:
1
error: <inline asm>:3:11: unknown token in expression
  adr x1, #0x10;
          ^



Compiling the CXX compiler identification source file "CMakeCXXCompilerId.cpp" failed.

import omvll
from functools import lru_cache

class MyConfig(omvll.ObfuscationConfig):
    def __init__(self):
        super().__init__()

    def obfuscate_string(self, module: omvll.Module, func: omvll.Function,
                               string: bytes):

        return True

#     def anti_hooking(self, mod: omvll.Module, func: omvll.Function) -> omvll.AntiHookOpt:
#         if "nativeobfuscatetest" in func.name:
#             return True
#         return False

#     def anti_hooking(self, mod: omvll.Module, func: omvll.Function) -> omvll.AntiHookOpt:
#         return True


#     def anti_hooking(self, mod: omvll.Module, func: omvll.Function) -> omvll.AntiHookOpt:
#         return True

    def obfuscate_arithmetic(self, mod: omvll.Module,
                                   fun: omvll.Function) -> omvll.ArithmeticOpt:
        return True

    def break_control_flow(self, mod: omvll.Module, func: omvll.Function):
        return True

    def flatten_cfg(self, mod: omvll.Module, func: omvll.Function):
        return True

    def obfuscate_constants(_, __, func: omvll.Function):
        return True

    def obfuscate_struct_access(self, _: omvll.Module, __: omvll.Function,
                                      struct: omvll.Struct):
        return True

    def obfuscate_string(self, _, __, string: bytes):
        return omvll.StringEncOptStack()

@lru_cache(maxsize=1)
def omvll_get_config() -> omvll.ObfuscationConfig:
    """
    Return an instance of `ObfuscationConfig` which
    aims at describing the obfuscation scheme
    """
    return MyConfig()