๐ Overview Enkripsi
Code Obfuscator Pro menggunakan multiple-layer encryption dengan kombinasi:
- โ ROT13 Character Rotation
- โ Base64 Encoding
- โ RC4-like Stream Cipher
- โ XOR Encryption dengan S-Box
- โ Seed-based Key Derivation
Original Code
โ
Layer 1: String Encoding (ROT13 + Base64)
โ
Layer 2: Generate S-Box from Seed
โ
Layer 3: RC4-like Stream Cipher
โ
Layer 4: XOR with Keystream
โ
Protected Code
๐ Layer-by-Layer Breakdown
Fungsi: Obfuscate string literals dalam code
Cara Kerja: Rotate setiap huruf 13 posisi dalam alphabet
// Input: "Hello World"
// ROT13: "Uryyb Jbeyq"
A โ N, B โ O, C โ P, ... Z โ M
a โ n, b โ o, c โ p, ... z โ m
Strength: Sederhana tapi efektif untuk menyembunyikan string
Fungsi: Convert binary data ke ASCII text
Cara Kerja: Encode setiap 3 bytes jadi 4 ASCII characters
// Input: "Hello"
// Base64: "SGVsbG8="
Binary: 01001000 01100101 01101100 01101100 01101111
Base64: S G V s b G 8 =
Strength: Safe untuk transmit via text-only channels
Fungsi: Generate substitution box dari seed phrase
Cara Kerja: Pseudo-random permutation menggunakan seed
function generateSBox(seed) {
$box = [0, 1, 2, ... 255]; // Initial state
$j = 0;
for ($i = 0; $i < 256; $i++) {
// Mix dengan seed
$j = ($j + $box[$i] + ord($seed[$i % len(seed)])) % 256;
// Swap positions
swap($box[$i], $box[$j]);
}
return $box; // Unique S-Box untuk seed ini
}
Strength: Setiap seed menghasilkan S-Box berbeda (256! kombinasi)
Fungsi: Encrypt data menggunakan keystream
Cara Kerja: Generate pseudo-random keystream, XOR dengan data
function encrypt(data, sbox) {
$i = $j = 0;
$result = "";
for ($n = 0; $n < length(data); $n++) {
// Generate keystream
$i = ($i + 1) % 256;
$j = ($j + $sbox[$i]) % 256;
swap($sbox[$i], $sbox[$j]);
// Get key byte
$k = $sbox[($sbox[$i] + $sbox[$j]) % 256];
// XOR with data
$result .= chr(ord($data[$n]) ^ $k);
}
return $result;
}
Strength: Stream cipher dengan keystream yang berbeda setiap byte
๐ฌ Comparison dengan Method Lain
| Method | Security | Speed | Reversible |
|---|---|---|---|
| Code Obfuscator Pro | โญโญโญโญโญ | โกโกโกโก | Dengan Seed |
| JavaScript Minify | โญโญ | โกโกโกโกโก | Mudah |
| Simple Base64 | โญ | โกโกโกโกโก | Sangat Mudah |
| AES Encryption | โญโญโญโญโญ | โกโกโก | Dengan Key |
| RSA Encryption | โญโญโญโญโญ | โกโก | Dengan Private Key |
๐ฏ Per-Language Implementation
JavaScript (Full Obfuscation)
Features:
- โ 4-Layer encryption
- โ Runtime decoder built-in
- โ Self-executing function
- โ Error handling
Output Structure:
(function(){
'use strict';
function r13(s) { /* ROT13 decoder */ }
function dec(p, k) { /* Stream cipher decoder */ }
try {
const src = dec("ENCRYPTED_PAYLOAD", "SEED_HASH");
new Function(src)(); // Execute decoded code
} catch(e) {
console.error('Error:', e.message);
}
})();
PHP (Full Obfuscation)
Features:
- โ 4-Layer encryption
- โ eval() decoder
- โ Inline decoder function
Output Structure:
Python (Full Obfuscation)
Features:
- โ 4-Layer encryption
- โ exec() decoder
- โ Pure Python decoder
Output Structure:
# Protected by Rekberin.net
import base64
def _r13(s): # ROT13 function
pass
def _d(p, s): # Decoder function
sb = [/* S-Box array */]
# Decryption logic
return "".join(result)
exec(_d("ENCRYPTED_PAYLOAD", "SEED"))
Other Languages (Base64 Encrypted)
Languages: HTML, CSS, Go, Bash, SQL, Java, C++
Method: RC4-like cipher + Base64
Note: Perlu manual decoder karena tidak ada eval/exec equivalent
// Protected by Rekberin.net
// Encrypted with seed hash: a1b2c3d4
// Base64 Encrypted Data:
// U2FsdGVkX1+... [encrypted data] ...
๐ก๏ธ Security Features
1. Seed-Based Protection
Tanpa seed yang benar, file tidak bisa di-decode:
- S-Box generation menggunakan seed
- Seed di-hash dengan SHA256
- Keystream unique per seed
2. Multi-Layer Defense
Attacker harus break semua layer:
- Layer 1: De-ROT13 strings
- Layer 2: Base64 decode
- Layer 3: Reverse S-Box generation
- Layer 4: Break stream cipher
3. Rate Limiting
Prevent brute-force attacks:
- 3 requests per 24 hours per IP
- SHA256 IP hashing
- File-based tracking
4. reCAPTCHA v3
Bot protection:
- Score-based (0.0 - 1.0)
- Threshold: 0.5
- Invisible verification
โก Performance Impact
| Metric | Impact | Note |
|---|---|---|
| File Size | +30-50% | Base64 encoding overhead |
| Execution Time | +5-10ms | Decoding overhead (first run) |
| Memory Usage | +2-5MB | Decoder function + S-Box |
| Runtime Performance | No impact | After decoded, run as normal |
๐ Decoding Process
Protected Code
โ
Reverse Layer 4: XOR with Keystream
โ
Reverse Layer 3: RC4 Decrypt
โ
Reverse Layer 2: Base64 Decode
โ
Reverse Layer 1: ROT13
โ
Original Code
Requirements for Decoding:
- โ Original encrypted file
- โ Correct seed phrase
- โ File not modified
- โ Same obfuscator version
Gunakan Decoder Tool untuk decode file kembali.