mixed-boolean-arithmetic

D810-ng (Next Generation) is an updated, tested, refactored, and optimized IDA Pro plugin used to deobfuscate code at decompilation time by modifying IDA Pro microcode.

An x86-64 code virtualizer for VM based obfuscation

Efficient general mixed boolean-arithmetic (MBA) simplifier

Deobfuscation of Semi-Linear Mixed Boolean-Arithmetic Expressions

Python 3.9 obfuscator built on LibCST with a library of fun obfuscation techniques, including polynomial MBAs, runtime bytecode patching, etc.

MIT IEEE URTC 2024. GSET 2024. Repository for the "MBASED: Practical Simplifications of Mixed Boolean-Arithmetic Obfuscation". A Binary Ninja decompiler plugin taking ideas from compiler construction to simplify obfuscated boolean expressions.

OLLVM-Next (Ensia): The next generation LLVM based Obfuscator

LLVM 21 pass plugin for A²MBA architectural and anti-generalization hardening of mixed Boolean-arithmetic expressions.

Recipe & ML-driven binary deobfuscation for Binary Ninja

PowerShell encryption using AES CBC - 256 bit encryption key

A simple tokenizer, parser and AST generator for s-expressions(ish) and CIL (.NET) Arithmetic OpCodes.

Encodes with B64, reverts them & builds the decoding part

High-performance Mixed Boolean-Arithmetic (MBA) expression synthesis tool

A C++23 PE binary protection suite for Windows x64 — virtualization, MBA mutation, encrypted guard pages, string encryption, CFG flattening and a self-unpacking packer. Includes a Python measurement suite scoring defenses against angr, Unicorn, IDA/d810, Frida, pe-sieve, msynth, SiMBA and BinDiff.

Binary Ninja plugin that cleans up MBA obfuscation and opaque predicates. Inspired by D-810.