codinggay / blackobfuscator

Black Obfuscator is an obfuscator for Android APK DexFile, it can help developer to protect source code by control flow flattening, and make it difficult to analyze the actual program control flow.

DEX控制流混淆 · BlackObfuscator

English Version

本项目针对Android APK DEX控制流混淆，在不会改变应用原有逻辑的前提下，会将原始代码进行控制流混淆，使得代码难以阅读，增加反编译阅读的难度以达到保护应用。

项目声明

• 本项目基于 dex2jar 进行修改
• Black系列交流群：390562046（QQ）

注意事项

• 本项目基于dex2jar，为了出现转换过程中避免不必要的问题，请尽量混淆自己业务的代码，避免其余三方库一起混淆，在混淆规则内提供自己的业务代码路径。

Android Studio插件支持

目前本项目已集成Android Studio插件，支持打包自动化混淆。详情请移至：BlackObfuscator-ASPlugin

GUI支持

GUI工具已开发完成，详情请移至：BlackObfuscator-GUI

如何使用

Main#main

参数	解释
-d	混淆深度，越高混淆越深
-i	输入dex的路径
-o	输出dex的路径
-a	规则文件，见下一步骤
-p	需要进行混淆的包名

    BlackObfuscatorCmd.main("d2j-black-obfuscator",
            "-d", "2",
            "-i", "/Users/milk/Documents/classes.dex",
            "-o", "/Users/milk/Documents/classes_out.dex",
            "-a", "filter.txt");

混淆规则

提供需要混淆的类

#it is annotation
#cn.kaicity

#class
cn.kaicity.gk.cdk.BuildConfig

#package
cn.kaicity

#blackList
!cn.kaicity.gk.cdk

#blackList中的包或者类不会进行混淆

后续计划

• 更高强度的混淆

效果展示

混淆前

混淆后

感谢

• dex2jar

请作者儿子喝奶粉

License

Copyright 2021 Milk

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

   http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.

blackobfuscator's Issues

有计划支持jar包的处理吗，毕竟dex和jar的指令有些不太一样

混淆工具报错

命令行方式进行混淆
black-obfuscator.bat d2j-black-obfuscator -a filter.txt -d 2 -i classes.dex -o out.dex

错误如下

        at org.jf.dexlib2.writer.DexWriter.writeAnnotationDirectories(DexWriter.java:698)
        at org.jf.dexlib2.writer.DexWriter.writeTo(DexWriter.java:267)
        at org.jf.dexlib2.writer.DexWriter.writeTo(DexWriter.java:246)
        at org.jf.DexLib2Utils.saveDexFileDexLib2(DexLib2Utils.java:116)
        at org.jf.DexLib2Utils.splitDex(DexLib2Utils.java:79)
        at com.googlecode.dex2jar.tools.BlackObfuscatorCmd.doCommandLine(BlackObfuscatorCmd.java:103)
        at com.googlecode.dex2jar.tools.BaseCmd.doMain(BaseCmd.java:290)
        at com.googlecode.dex2jar.tools.BlackObfuscatorCmd.main(BlackObfuscatorCmd.java:38)

Error

String obfuscation

Can you add option to obfuscate strings too?

Method code too large!

该错误来自 BlackObfuscator-ASPlugin, 根据报错定位到 MethodWriter.getSize 方法报错，但是查看下面字节码并不是很长，该如何处理，望大佬回复

#This file is generated by dex2jar
Please report this file to https://github.com/pxb1988/dex2jar/issues if possible.

There are 629 methods fail to translate.
2023-08-03 15:41:19 UTC
version: [dex-reader-2.1-SNAPSHOT, dex-reader-api-2.1-SNAPSHOT, dex-ir-2.1-SNAPSHOT, d2j-smali-2.1-SNAPSHOT, d2j-base-cmd-2.1-SNAPSHOT, dex-tools-2.1-SNAPSHOT, dex-translator-2.1-SNAPSHOT]
cmdline: [-f, /Users/XXX/Projects/XXX/app/build/intermediates/dex/release/mergeDexRelease/1691077236803splitclasses.dex.dex, -o, /Users/XXX/Projects/XXX/app/build/intermediates/dex/release/mergeDexRelease/1691077236803obfclasses.dex.jar]
env:
java.specification.version: 17
java.vendor.url: https://openjdk.java.net/
java.specification.vendor: Oracle Corporation
java.version.date: 2023-04-18
java.home: /Users/XXX/Library/Application Support/JetBrains/Toolbox/apps/AndroidStudio/ch-0/231.9225.16.2311.10533651/Android Studio Preview.app/Contents/jbr/Contents/Home
java.vm.compressedOopsMode: Zero based
java.vm.specification.vendor: Oracle Corporation
java.specification.name: Java Platform API Specification
java.runtime.version: 17.0.7+0-17.0.7b829.16-10353782
java.io.tmpdir: /var/folders/zg/3d6ch2t50v13gtygpvmfnhz80000gn/T/
java.version: 17.0.7
java.vm.specification.name: Java Virtual Machine Specification
java.library.path: /Users/XXX/Library/Java/Extensions:/Library/Java/Extensions:/Network/Library/Java/Extensions:/System/Library/Java/Extensions:/usr/lib/java:.
java.vendor: JetBrains s.r.o.
java.rmi.server.disableHttp: true
java.class.path: /Users/XXX/.gradle/wrapper/dists/gradle-8.2-bin/bbg7u40eoinfdyxsxr3z4i7ta/gradle-8.2/lib/gradle-launcher-8.2.jar
java.vm.vendor: JetBrains s.r.o.
java.vm.specification.version: 17
java.awt.headless: true
java.runtime.name: OpenJDK Runtime Environment
java.vm.name: OpenJDK 64-Bit Server VM
java.vendor.url.bug: https://bugreport.java.com/bugreport/
java.util.concurrent.ForkJoinPool.common.threadFactory: com.intellij.concurrency.IdeaForkJoinWorkerThreadFactory
java.vm.info: mixed mode
java.vm.version: 17.0.7+0-17.0.7b829.16-10353782
java.rmi.server.hostname: 127.0.0.1
java.class.version: 61.0


....
================= 463 ===================
Lxxx/og;->getSf()Ljava/text/SimpleDateFormat;
java.lang.RuntimeException: Method code too large!
	at org.objectweb.asm2.MethodWriter.getSize(MethodWriter.java:2036)
	at org.objectweb.asm2.AsmBridge.sizeOfMethodWriter(AsmBridge.java:31)
	at com.googlecode.d2j.dex.ExDex2Asm.convertCode(ExDex2Asm.java:54)
	at com.googlecode.d2j.dex.Dex2jar$2.convertCode(Dex2jar.java:134)
	at com.googlecode.d2j.dex.Dex2Asm.convertMethod(Dex2Asm.java:686)
	at com.googlecode.d2j.dex.Dex2Asm.convertClass(Dex2Asm.java:476)
	at com.googlecode.d2j.dex.Dex2Asm.convertClass(Dex2Asm.java:379)
	at com.googlecode.d2j.dex.Dex2Asm.convertDex(Dex2Asm.java:515)
	at com.googlecode.d2j.dex.Dex2jar.doTranslate(Dex2jar.java:190)
	at com.googlecode.d2j.dex.Dex2jar.to(Dex2jar.java:295)
	at com.googlecode.dex2jar.tools.Dex2jarCmd.doCommandLine(Dex2jarCmd.java:120)
	at com.googlecode.dex2jar.tools.BaseCmd.doMain(BaseCmd.java:290)
	at top.niunaijun.blackobfuscator.core.ObfDex.handleDex(ObfDex.java:99)
	at top.niunaijun.blackobfuscator.core.ObfDex.obf(ObfDex.java:34)
	at top.niunaijun.blackobfuscator.core.ObfDex$obf.call(Unknown Source)
	at top.niunaijun.blackobfuscator.ObfPlugin$1$_execute_closure1.doCall(ObfPlugin.groovy:45)
	at jdk.internal.reflect.GeneratedMethodAccessor222.invoke(Unknown Source)
.....

.method private final getSf()Ljava/text/SimpleDateFormat;
  .registers 2
    sget-object v0, Landroidx/compose/animation/AppLog;->sf$delegate:Lkotlin/Lazy;
    invoke-interface { v0 }, Lkotlin/Lazy;->getValue()Ljava/lang/Object;
    move-result-object v0
    check-cast v0, Ljava/text/SimpleDateFormat;
    return-object v0
.end method

....
================= 612 ===================
Lxxxxx/XX;->random(JLkotlin/ranges/IntRange;)J
java.lang.RuntimeException: Method code too large!
at org.objectweb.asm2.MethodWriter.getSize(MethodWriter.java:2036)
at org.objectweb.asm2.AsmBridge.sizeOfMethodWriter(AsmBridge.java:31)
at com.googlecode.d2j.dex.ExDex2Asm.convertCode(ExDex2Asm.java:54)
at com.googlecode.d2j.dex.Dex2jar$2.convertCode(Dex2jar.java:134)
at com.googlecode.d2j.dex.Dex2Asm.convertMethod(Dex2Asm.java:686)
at com.googlecode.d2j.dex.Dex2Asm.convertClass(Dex2Asm.java:476)
at com.googlecode.d2j.dex.Dex2Asm.convertClass(Dex2Asm.java:379)
at com.googlecode.d2j.dex.Dex2Asm.convertDex(Dex2Asm.java:515)
at com.googlecode.d2j.dex.Dex2jar.doTranslate(Dex2jar.java:190)
at com.googlecode.d2j.dex.Dex2jar.to(Dex2jar.java:295)
at com.googlecode.dex2jar.tools.Dex2jarCmd.doCommandLine(Dex2jarCmd.java:120)
at com.googlecode.dex2jar.tools.BaseCmd.doMain(BaseCmd.java:290)
at top.niunaijun.blackobfuscator.core.ObfDex.handleDex(ObfDex.java:99)
at top.niunaijun.blackobfuscator.core.ObfDex.obf(ObfDex.java:34)
at top.niunaijun.blackobfuscator.core.ObfDex$obf.call(Unknown Source)
at top.niunaijun.blackobfuscator.ObfPlugin$1$_execute_closure1.doCall(ObfPlugin.groovy:45)
at jdk.internal.reflect.GeneratedMethodAccessor222.invoke(Unknown Source)
...

.method private final random(JLkotlin/ranges/IntRange;)J
  .register 6
    sget-object v0, Lkotlin/random/Random;->Default:Lkotlin/random/Random$Default;
    check-cast v0, Lkotlin/random/Random;
    invoke-static { v0, p3 }, Lkotlin/random/RandomKt;->nextInt(Lkotlin/random/Random;Lkotlin/ranges/IntRange;)I
    move-result p3
    int-to-long v0, p3
    add-long/2addr p1, v0
    return-wide p1
.end method

有maven混淆的插件吗

Android

this library will work in android apps i mean like making app for obfuscate apk files in android...

No Classes Found

        ArrayList<String>` args = new ArrayList<>();
        args.add("d2j-black-obfuscator/");
	args.add("-d");
	args.add("2");
	args.add("-i");
	args.add("sdcard/classes.dex");
	args.add("-o");
	args.add("sdcard/classes_out.dex");
	args.add("-a");
	args.add("sdcard/ad.txt");
	BlackObfuscatorCmd.main(args.toArray(new String[0]));

What is the problem here ?

异常:Class file too large!

作者您好，
感谢您提供的混淆工具，
我在使用过程中出现了了如下错误，请问能修正一下吗？
十分感谢。
相关错误日志如下：
java.lang.RuntimeException: Class file too large!
at org.objectweb.asm2.ClassWriter.toByteArray(ClassWriter.java:812)
at com.googlecode.d2j.dex.Dex2jar$1$1.visitEnd(Dex2jar.java:107)
at com.googlecode.d2j.dex.Dex2Asm.convertClass(Dex2Asm.java:482)
at com.googlecode.d2j.dex.Dex2Asm.convertClass(Dex2Asm.java:379)
at com.googlecode.d2j.dex.Dex2Asm.convertDex(Dex2Asm.java:515)
at com.googlecode.d2j.dex.Dex2jar.doTranslate(Dex2jar.java:190)
at com.googlecode.d2j.dex.Dex2jar.to(Dex2jar.java:295)
at com.googlecode.dex2jar.tools.Dex2jarCmd.doCommandLine(Dex2jarCmd.java:120)
at com.googlecode.dex2jar.tools.BaseCmd.doMain(BaseCmd.java:290)
at com.googlecode.dex2jar.tools.BlackObfuscatorCmd.doCommandLine(BlackObfuscatorCmd.java:115)
at com.googlecode.dex2jar.tools.BaseCmd.doMain(BaseCmd.java:290)
at com.googlecode.dex2jar.tools.BlackObfuscatorCmd.main(BlackObfuscatorCmd.java:38)
at Main.main(Main.java:7)

能不能根据参数混淆达到代码去重效果

比如同一个app，每次混淆的代码重复高吗，混淆后能降低代码重复率么？感谢回答

Keeps printing usage

No matter what i do, it keeps printing usage. What i'm doing wrong?

i'm using Windows 10

./black-obfuscator -d 2 -i classes.dex -o classesout.dex

Multiple packages in CMD

Is it possible to add multiple packages for -p in CMD?

能否支持jar混淆?