Skip to content

ilyida/Alcatraz-Deobfuscator

Repository files navigation

Alcatraz-Deobfuscator

A lightweight and fully functional tool for deobfuscating binaries protected with weak1337's Alcatraz.

This tool supports complete deobfuscation of Alcatraz-obfuscated binaries and is ready for use in reversing and analysis workflows.

Building

Dependencies are included as Git submodules. To clone and build:

git clone --recursive https://github.com/ilyida/Alcatraz-Deobfuscator.git
cd Alcatraz-Deobfuscator
cmake -B build

Usage

The tool requires three arguments:

Alcatraz-Deobfuscator <input_binary> <output_binary> <output_routine_list>
  • input_binary – Path to the Alcatraz-obfuscated binary
  • output_binary – Path where the deobfuscated binary will be saved
  • output_routine_list – A text file containing the names and addresses of recovered routines

This routine list is compatible with the provided ida_func_loader.py script, which helps IDA Pro correctly identify and label deobfuscated functions.

About

Deobfuscator for weak1337's Alcatraz obfuscator

Topics

Resources

Stars

Watchers

Forks

Packages

No packages published