Re: [Jode-users] JODE obfuscation.
Brought to you by:
hoenicke
|
From: Jochen H. <hoe...@gm...> - 2012-05-04 09:51:35
|
Hello Zach, 2012/5/3 Me Myself and I <sta...@li...>: > > Jode is both a java decompiler and obfuscator, for java. > > -Can java obfuscate class files while they are inside jar,war,ear files? It can read classes from zip files and jar and war files are just zip files, so it works for them. I'm not sure about ear files, but probably they are also zip files. > -When JODE produces an obfuscated result, does it simply alter input file(s), > or does it output a second file (s) ? It outputs them to a separate directory or zip file. > -Can jode perform class file obfuscation, and not just source > code obfuscation? Yes, it only works on class files, not on source files. > -Can JODE change class files such that they run on multiple platform > java runtimes exactly the same, but such that decompilers produce > fatal run errors and seize when they try to decompile? The decompiler will still be able to decompile them. It only renames the identifiers, so that the decompiled code is less readable. > -Can Jode alter class files to block completion of decompilation entirely? > -Particularly against its own decompilation? > Presumably this can be accomplished by use of a customising script file. No. For this you need an obfuscator that adds some fake uncompilable code into the class files. Search for flow obfuscation to find such tools. > > -Could I be sent just such a script file as accomplishes the goals behind my earlier questions > in this email, with an example of a command line example of how to call the obfuscator > on a java class(es) via implementation of the custom script? For this I would need to know, what the code is, you want to obfuscate. In particular, what are the package names, what is the main class, is there any reflection used, so that class names need to be preserved, what are the libraries (and should they also be obfuscated), and what kind of java application is this (standalone, applet, webapp, plugin, etc). Regards, Jochen |