Skip to content

This is the repository for the upcoming "Sunlight for Darcula: Bypassing Emotet-Based Array Canaries via Autonomous Function Call Resolution" paper

License

Notifications You must be signed in to change notification settings

calysteon/Arphsy

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

10 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Arphsy

Array Canary

Demo

Arphsy

Requirements

Python

pip install sys, os

JavaScript

npm install fs
npm install acorn
npm install path
npm install estraverse
npm install escodegen

Usage

# Run Arphsy against a sample with 63 lines of obfuscated JavaScript
bash harness.sh -e "./sample/extracted.js" -v "./sample/verified.js" -s "./sample/63.js"

# Run Arphsy against a sample with 110 lines of obfuscated JavaScript
bash harness.sh -e "./sample/extracted.js" -v "./sample/verified.js" -s "./sample/110.js"

# Run Arphsy against a sample with 338 lines of obfuscated JavaScript
bash harness.sh -e "./sample/extracted.js" -v "./sample/verified.js" -s "./sample/338.js"

# Run Arphsy against a sample with 409 lines of obfuscated JavaScript
bash harness.sh -e "./sample/extracted.js" -v "./sample/verified.js" -s "./sample/409.js"

About

This is the repository for the upcoming "Sunlight for Darcula: Bypassing Emotet-Based Array Canaries via Autonomous Function Call Resolution" paper

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published