Defeating web-application obfuscation

This guide is aimed at individuals with intermediate web literacy, you are expected to understand certain fundemental concepts.

What is obfuscation?

noun obfuscation

"The act or process of obfuscating, or obscuring the perception of something; the concept of concealing the meaning of a communication by making it more confusing and harder to interpret."

Pre-requisites

• Node.js
• Basic Regex
• Understanding of some cryptography concepts

Table of Contents

1. Getting Started - Introduction and setup
2. Understanding Packers - Learn about web application packers
3. Understanding Javascript Quirks - Learn about some quirks in Javascript
4. Intro to Abstract Syntax Trees - What are Abstract Syntax Trees?
5. Intro to Transformation Obfuscation - Basic transformation techniques
6. Defeating Anti-Tampering - Advanced techniques for bypassing protections
7. Keep It Simple Stupid (KISS) - Think like an attacker

Challenges

Each of the chapters will have at least 1 flag formatted as flag{FL4G_H3RE}, you can submit the md5 hash of the flag in Github Issues to be added to the winners section.

Challenges arent necessarily in order of difficulty, points should instead be used determine difficulty of each challenge.

Winners

• @pawhash - 60 point(s)
• @justchokingaround - 60 point(s)
• @kaorlol - 20 point(s)