Уровень 0 · материалов: 5
В кластер входят документы, описывающие технические способы маскировки исполняемого кода или данных внутри других форматов файлов и методы затруднения чтения исходного кода.
Общие признаки: скрытие кода в файлах, обфускация, полиглоты файлов, обход статического анализа, защита исходного кода
Группа выше: Вредоносное ПО: виды, механизмы и анализ
Смысл: The main idea is to demonstrate a method of 'catfuscation' (a play on obfuscation) where executable .NET code is hidden inside image files to mislead novice hackers and bypass simple static analysis.
The author presents a tool that hides, encrypts, and executes .NET assemblies embedded within image files using steganography.
Смысл: The main idea is to demonstrate that beneath the 'safe' and industrial facade of .NET/C#, there are numerous low-level loopholes and syntactic flexibility that allow for highly unconventional, obfuscated, and potentially dangerous programming practices.
An exploration of C# and .NET 'dark arts' showcasing how to bypass safety mechanisms, obfuscate code, and exploit language quirks for non-production curiosity.
Смысл: The main idea is to provide a technical method for hiding Python source code from casual viewers by combining file encryption with a custom import hook (PEP 302) to load code directly into memory, thereby avoiding the distribution of plain-text files.
The author implements a custom Python importer that decrypts encrypted source files in memory at runtime to protect proprietary logic from competitors.
Смысл: The main idea is to demonstrate that by manipulating JPEG compression parameters and Huffman tables, one can create a valid image file that doubles as an ASCII representation of itself when viewed in a text editor.
The author describes a method to encode JPEG images using custom Huffman tables and extreme quantization so they appear as ASCII art in a text editor.
Смысл: The main idea is a proof-of-concept demonstration of polyglot files, specifically showing how the structural overlaps between the GIF image format and JavaScript syntax can be exploited to create a single file that is valid in both contexts.
The author explains how to construct a GIF image that can be executed as JavaScript code by manipulating file headers, dimensions, and comment blocks.