Open Source Java Obfuscators

Mixin is a trait/mixin framework for Java using ASM and hooking into the runtime classloading process via a set of pluggable built-in or user-provided services. Built-in services currently support Mojang's LegacyLauncher system, though this is deprecated in favor of ModLauncher by cpw, which has greater extensibility and has support for Java 8 and later. Additional documentation for individual features and annotations can be found in the extensive Javadoc. For additional help use the channel #mixin on the Sponge Discord Server. For handling obfuscation tasks, Mixin provides an Annotation Processor which works at compile time to generate obfuscation mappings for your toolchain to apply. If using Gradle 5 or later, annotation processors are no longer automatically loaded from compile configurations and must be specified explicitly via annotationProcessor configurations.

ProGuard has moved to Github now: https://github.com/Guardsquare/proguard ProGuard is a free Java class file shrinker, optimizer, obfuscator, and preverifier. It detects and removes unused classes, fields, methods, and attributes. It optimizes bytecode and removes unused instructions. It renames the remaining classes, fields, and methods using short meaningless names. ProGuard is useful for making code more compact and more efficient, on the desktop, on tablets, on smartphones, and on embedded devices. It also makes code more difficult to reverse engineer.

Simplify virtually executes an app to understand its behavior and then tries to optimize the code so that it behaves identically but is easier for a human to understand. Each optimization type is simple and generic, so it doesn't matter what specific type of obfuscation is used. Provides a virtual machine sandbox for executing Dalvik methods. After executing a method, it returns a graph containing all possible register and class values for every execution path. It works even if some values are unknown, such as file and network I/O. For example, any if or switch conditional with an unknown value results in both branches being taken. Analyzes the execution graphs from smalivm and applies optimizations such as constant propagation, dead code removal, unreflection, and some peephole optimizations. These are fairly simple, but when applied together repeatedly, they'll decrypt strings, remove reflection, and greatly simplify code. It does not rename methods and classes.

xUtils includes orm, http(s), image, view annotations, but it is still very lightweight (251K), and has powerful features and is easy to expand. Efficient and stable orm tool, which makes it more convenient to support cookies and caching when the http interface is implemented. Based on UrlConnection, the bottom layer will be implemented by okHttp after Android4.4. The request protocol supports 11 predicates: GET, POST, PUT, PATCH, HEAD, MOVE, COPY, DELETE, OPTIONS, TRACE, CONNECT. Supports uploading of very large files (over 2G). Support breakpoint download (if the server supports the Range parameter, the client automatically handles the breakpoint download). Support cookies (implements domain, path, expiry and other features). Support caching (implement Cache-Control, Last-Modified, ETag and other features, use expiration time + LRU dual mechanism to clean up when the cache content is too much).

JODE is a java package containing a decompiler and an optimizer (aka obfuscator ;-) for java.

The project provides a set of Ant tasks for developing J2ME/MIDP applications based on the J2ME Wireless Toolkit. The new tasks allow for compilation, preverification, packaging, and obfuscation of a MIDlet suite as well as for making a PalmOS PRC file.

An API and a graphical tool for inspection (viewing, searching and comparing) and manipulation (modification, obfuscation, refactoring of methods, fields, attributes and code) of classfiles for the Java platform.

HDLObf is intended to be a HDL Obfuscator and identifier name change utility. Primarily designed for Verilog/SystemVerilog support will be added for VHDL/SystemC in future.

DOC is an abstract interpreter that supports finding obfuscated function calls in x86 executables, commonly found in malicious programs.

Stand-alone JAVA Email obfuscation tool for HTML pages. This tool can be used to process single pages, or whole webpage bundles, to protect email addresses occuring in them from spam bots and other harvesters, by hiding them using various methods.

This plugin allows you to obfuscate maven artifacts using the ProGuard open source obfuscator, which is a very powerful and well established Java obfuscator. ProGuard can also be found on SourceForge at http://proguard.sourceforge.net/. This plugin can be used from your POM as follows: <groupId>com.idfconnect.devtools</groupId> <artifactId>idfc-proguard-maven-plugin</artifactId> <version>1.0.1</version> Apache Maven, Maven, Apache, the Apache feather logo, and the Apache Maven project logos are trademarks of The Apache Software Foundation.

JEST will be the Java bytecode engineering Swiss-Army Jackhammer. It will include a disassembler, class browser, obfuscator, optimizer, class editor, and bytecode debugger, and have an intuitive GUI.

JarSpy - The Java Archive Spy. JarSpy provides insight into the contents of Java archive files (.jar, .zip, .ear, .war etc.). Eventually, JarSpy will provide the ability to modify the contents of Java archive files for instrumentation, obfuscation etc.

JavaGuard is a general purpose bytecode obfuscator, designed to fit effortlessly into your regular build and testing process, providing peace of mind that your valuable Java code is more secure against decompilation and other forms of reverse engineering

Jymini is a JavaScript minifier and obfuscator. While there are several of these out there, I couldn't find one that did exactly what I needed. This program is very flexible and has features that others don't.

Yet another Java obfuscation tool. This one has a bit of a different twist, in that it can obfuscate native methods by generating a .h file which #defines the original method names to the obfuscated ones. Built with Apache BCEL.

Obclipse manage the obfuscation of an ready build eclipse product. It collects the necessary information of a product, configure a third party obfuscator, obfuscate the product and fixes the textual files of the plugins by the obfuscated class names.

obfuscate4e is an Eclipse feature to obfuscate plugins during their export. This feature provides an integrated proguard obfuscator, other obfuscators might be added as plugins. The project moved to http://code.google.com/p/obfuscate4e/

This simple Java applet will use a few URL obfuscation methods to mask a URL. This isn't meant to be anything earth shattering, but maybe useful. It does more than basic URL encoding (although it does that). Also contains a library to do it all.