
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
github.com/algorora/control-flow-flattening-poc
This repository contains a Go-based tool designed to apply control flow flattening to PowerShell scripts. Control flow flattening is an advanced obfuscation technique that makes the execution path of scripts more complex and harder to analyze. This tool is intended for educational purposes and to demonstrate how control flow flattening can be implemented in practice.
Control Flow Flattening: Transforms PowerShell scripts to obscure their execution flow by introducing complex conditional branches and random variable names. Simple and Effective: Provides a straightforward implementation to showcase the control flow flattening technique without additional obfuscation methods.
Build the Executable:
go build control_flow_flattening.go
Run the Tool:
./control_flow_flattening -script /path/to/your/script.ps1
Replace /path/to/your/script.ps1 with the path to your PowerShell script.
To obfuscate a PowerShell script, place your script in the designated path and run the tool. The obfuscated script with flattened control flow will be output to the terminal.
This tool is provided for educational and research purposes only. Use it responsibly and ensure compliance with all applicable laws and regulations. The creator of this tool does not endorse or condone illegal activities.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.