Lua Obfuscation Snippets

[Xaotic]

Since lately i am SO OBSESSED with obfuscation in Lua I will supply some obfuscation snippets
Some of those are things ive came up with such as the FuncTree obfuscation (never seen this anywhere else)
I will keep editing some in
 
FuncTree Obfuscation

Spoiler

Spoiler

-- FuncTree Obfuscation
function x()	--Define function 1
	print"Func 1 executed"
	return function() print"Func 2 executed" --Returns function 1 
		return function() print"Last func executed" --Returns function 2
			return "end it now"	--Returns string
		end 
	end
end

x=x() --Function 1 -> "Func 1 executed"
x=x() --Function 2 -> "Func 2 executed"
x=x() --Function 3 -> "Last func executed" and converts x into a string
print(x) -- "end it now"

Automatically set x after function executed

Spoiler

-- FuncTree Obfuscation::Setting x in the function itself
function x()	--Define function 1
	print"Func 1 executed"
	x=function() print"Func 2 executed" --Returns function 1 
		x=function() print"Last func executed" --Returns function 2
			x=function() return "end it now" end	--Returns function which returns string
		end 
	end
end

x() --Function 1 -> "Func 1 executed"
x()	--Function 2 -> "Func 2 executed"
x() --Function 3 -> "Last func executed"
print(x()) -- "end it now"

Looping the code (after 4 times x, x prints "Func 1 executed" again

Spoiler

-- FuncTree Obfuscation::Setting x in the function itself
function x()	--Define function 1
	local o=x --Backup x function in variable o
	print"Func 1 executed"
	x=function() print"Func 2 executed" --Returns function 1 
		x=function() print"Last func executed" --Returns function 2
			x=function() x=o return "end it now" end	--Returns function which returns string and set x to o (backed up x)
		end 
	end
end

x() --Function 1 -> "Func 1 executed"
x()	--Function 2 -> "Func 2 executed"
x() --Function 3 -> "Last func executed"
print(x()) -- "end it now"

x() --Function 1 -> "Func 1 executed"
x()	--Function 2 -> "Func 2 executed"
x() --Function 3 -> "Last func executed"

 In a while loop

Spoiler

-- FuncTree Obfuscation::While loop
function x()	--Define function 1
	print"Func 1 executed"
	x=function() print"Func 2 executed" --Returns function 1 
		x=function() print"Last func executed" --Returns function 2
			x=nil	---Sets to nil
		end 
	end
end


while(x) do x() end -- While x exists (isn't nil) execute x

Unicode vars/"Invisible" var names

Spoiler

--Unicode variables
--[[
With unicode variables you can make it pretty much impossible for a human
to see the difference between funtion names.

What i use for this are zero width characters http://www.fileformat.info/info/unicode/char/200b/browsertest.htm
To define a global variable with unicodes you can set them with the table _G
As example _G["=!=?!"] = function() print"Toucan was here" end

Now you can use the zero width char to make it look like the defined func was empty
_G["​"] <- seems empty, right?
To make multiple just put in two of those zero width chars
]]

_G["​"] = print
_G["​​"] = "Hello Nulled.IO!"
_G["​​​"] = " What is love?"

_G["​"](_G["​​"].._G["​​​"]) --Prints "Hello Nulled.IO! What is love?"

--Now if we replace the zero-width char with x it would look like this

_G["​​x"] = print
_G["​​x​​x"] = "Hello Nulled.IO!"
_G["​​x​​x​​x"] = " What is love?"

_G["​​x"](_G["​​x​​x"].._G["​​x​​x​​x"]) --Prints "Hello Nulled.IO! What is love?"

Edited by Xaotic, 16 May 2015 - 03:11 PM.

[Jartsu]

Sounds really great tutorial! 

[97519250]

what is this .

[pruned_6214949]

Sounds really great tutorial!

[Feez]

Cool, I like the FuncTree "obfuscation", but the second one would just decompile to:

_G["\226\128\139"] = print
_G["\226\128\139\226\128\139"] = "Hello Nulled.IO!"
_G["\226\128\139\226\128\139\226\128\139"] = " What is love?"
_G["\226\128\139"](_G["\226\128\139\226\128\139"] .. _G["\226\128\139\226\128\139\226\128\139"])
_G["\226\128\139\226\128\139x"] = print
_G["\226\128\139\226\128\139x\226\128\139\226\128\139x"] = "Hello Nulled.IO!"
_G["\226\128\139\226\128\139x\226\128\139\226\128\139x\226\128\139\226\128\139x"] = " What is love?"
_G["\226\128\139\226\128\139x"](_G["\226\128\139\226\128\139x\226\128\139\226\128\139x"] .. _G["\226\128\139\226\128\139x\226\128\139\226\128\139x\226\128\139\226\128\139x"])

[yuxexes99]

thanks for this 

[ladykillahvn11]

ty

[debarest]

Hi Xaotic,

 

Firstly, thank you for this codes....

 

You have something to script deobfuscation?

 

Regards,

[Xaotic]

Hi Xaotic,

 

Firstly, thank you for this codes....

 

You have something to script deobfuscation?

 

Regards,

Such as..?

Like, example code?

[debarest]

I look something about bol script. I do a search on forum, but not found anything.

Regards