Binary-Security on +5 Security Research

Binary-Security on +5 Security Researchhttps://overkazaf.github.io/blogs/tags/binary-security/Recent content in Binary-Security on +5 Security ResearchHugozh-cnSat, 08 Aug 2026 11:45:00 +0800当 Hook 失效的那一刻：SVC 指令级系统调用保护的攻防https://overkazaf.github.io/blogs/posts/android-svc-syscall-protection/Sat, 08 Aug 2026 11:45:00 +0800https://overkazaf.github.io/blogs/posts/android-svc-syscall-protection/深入分析Android应用中基于SVC指令的内联系统调用保护技术，覆盖反调试、反Hook、完整性校验、进程检测与seccomp-BPF五大对抗场景，并给出Frida Stalker、seccomp拦截、内核模块等六种绕过方案的实战对比当 sign() 函数变成了两万行伪代码https://overkazaf.github.io/blogs/posts/android-native-vmp-analysis/Fri, 10 Jul 2026 14:30:00 +0800https://overkazaf.github.io/blogs/posts/android-native-vmp-analysis/从实战视角拆解 Android Native 层 VMP 保护的三代演进、dispatcher 识别、handler 枚举与语义恢复，讨论 VMP 的真实安全边界与工程误区。所有分支都指向同一个 switch，然后呢https://overkazaf.github.io/blogs/posts/ollvm-deobfuscation-engineering/Fri, 05 Jun 2026 16:20:00 +0800https://overkazaf.github.io/blogs/posts/ollvm-deobfuscation-engineering/从 IDA 里 400 个基本块的平坦化函数出发，完整拆解 OLLVM 三大混淆 pass 的工程原理与去混淆实战，覆盖 CFF/BCF/指令替换/字符串加密的识别、攻击与工具链对比