Obfuscators
November 1, 2022 · View on GitHub
Free / Open Source
| Tool | Description | Link |
|---|---|---|
| Bozar | An open source Java obfuscator. | Source |
| Caesium | An open source Java obfuscator by sim0n. Offers some neat ZIP file tricks (Auto-patchable in Recaf) among other common JVM obfuscation features. | Source |
| dProtect | dProtect is an extension of ProGuard adding simple string/flow/arithmetic obfuscation. | Source |
| JObf | JObf is an open source obfuscator by superblaubeere27. | Source |
| Proguard | Proguard is one of the most common obfuscators out there. It's one of the oldest and most imporantly, its totally free. It really only supports name obfuscation and not much else. Ironically, you can use it on obfuscated jars to weaken name obfuscation into something more workable. | Proguard - Source |
| Radon | DISCONTINUED Radon is an open source obfuscator by ItzSomebody. | Source |
| Scuti | Scuti is an open source obfuscator by netindev. | Source |
| yGuard | yGuard is similiar to proguard in that its more of a code-shrinker than of an obfuscator. | yGuard - Source |
Premium
| Tool | Description | Price | Link |
|---|---|---|---|
| Allatori | Allatori is has a free demo with basic obfuscation features. You can't beat free. |
| Allatori |
| Binscure | DISCONTINUED Binscure offers standard obfuscation features (Except renaming) plus decompiler/ASM crashing capabilities (Auto-patchable in Recaf). Flow control crashes most decompilers. |
| Binscure |
| Bisguard | Bisguard is a Java packer. It wraps a jar file in a launcher protecting the original only with a simple XOR cipher. The reviews on the site are hilarious considering how little this protects applications. |
| Bisguard |
| Branchlock | A web based obfuscator for Java and Android. Offers standard obfuscation features plus decompiler crashing tools (Auto-patchable in Recaf) |
| Branchlock |
| DashO | DashO is a step above Allatori in almost every department. The flow obfuscation is more noticeable than in some other obfuscators, the string encryption is more dynamic, and it has more features overall. |
| DashO |
| Dexguard | Dexguard is an Android application obfuscator, supports all the common features plus a few extra Android-specific abilities. |
| Dexguard |
| DexProtector | DexProtector is another Android application obfuscator made by Licel (developers of Stringer). |
| DexProtector |
| ESkid | DISCONTINUED Similar to binscure/paramorphism in terms of features. Offers decompiler/ASM crashers (Auto-patchable in Recaf) |
| ESkid |
| Excelsior JET | DISCONTINUED Technically not an obfuscator, as it is actually an ahead-of-time compiler. Still, reversing native code is effectively obfuscation in comparison to reversing java code. |
| Excelsior JET |
| Jfuscator | Aside from the fact that it can't support anything past Java 7, its about on par with DashO. String obfuscation is dynamic enough to basic skids. Flow obfuscation works, but isn't that strong. |
| Jfuscator |
| JNIC | Maps method bodies to JNI generated code that is bundled with your jar. Useful to deter skids who can't open IDA and map out JNI structs. |
| jnic |
| Paramorphism | Paramorphism utilizes ZIP file corruption to deter usage of common mainstream reverse-engineering tools. There's also a discord chat. |
| Paramorphism |
| Stringer | Stringer is a relatively strong obfuscator. The flow obfuscation on high settings is painful to reverse engineer (Requires minor emulation). It boasts some other neat features others don't have like resource protection and reflection obfuscation. Sadly the cooler features are locked away under the enterprise license which I cannot find any information about online. Just assume it costs an arm and a leg. |
| Stringer |
| Zelix Klassmaster | Zelix is another great obfuscator. It is an oldie, and their website shows it. Despite the outdated website Zelix is consistently updated and is battle-tested. For the features it gives the smallest license is an absolute steal. |
| Zelix Klassmaster |
Note: "Varies" means that the price is not set in stone and is determined when you ask for a quote through their sales team.