| Version | Supported |
|---|---|
| 4.2.x (latest) | ✅ |
| 4.1.x | ❌ |
| 4.0.x | ❌ |
| 3.0.x | ❌ |
| 2.0.x | ❌ |
| 1.0.x | ❌ |
ObfuGuard is a binary obfuscation research tool. It modifies PE executable files at the machine code level. Please be aware of the following:
- Only use ObfuGuard on binaries you own or have explicit permission to modify
- Obfuscated binaries may trigger antivirus/EDR false positives due to structural changes (new sections, relocated code, entry point modification)
- Do not use ObfuGuard to conceal malicious software. This tool is intended for legitimate software protection and academic research
If you discover a security vulnerability in ObfuGuard, please report it responsibly:
- Email: Contact the maintainer at the email listed in the GitHub profile @sondt99
- GitHub Issues: For non-sensitive bugs, open an issue at github.com/sondt99/ObfuGuard/issues
- Description of the vulnerability
- Steps to reproduce
- Affected version(s)
- Potential impact
- Acknowledgment: Within 7 days
- Assessment: Within 14 days
- Fix/Patch: Depends on severity; critical issues will be prioritized
ObfuGuard modifies PE structure extensively. The following changes are expected and not considered vulnerabilities:
- New PE sections (
.0Cff,.0Dev, and per-function sections) - Modified entry point
- Relocated function code
- Increased binary size
ObfuGuard loads PDB files using the Windows DbgHelp API. Only process PDB files from trusted sources, as malformed PDB files could potentially cause unexpected behavior.
ObfuGuard depends on several third-party libraries. Security issues in these dependencies should be reported to their respective maintainers:
| Library | Repository |
|---|---|
| Capstone | github.com/capstone-engine/capstone |
| Keystone | github.com/keystone-engine/keystone |
| LIEF | github.com/lief-project/LIEF |
| AsmJit | github.com/asmjit/asmjit |
| Zydis | github.com/zyantific/zydis |