Merge branch 'skidfuscatordev:master' into master

Author: anjeshshrestha

.gitmodules

@@ -1,2 +1,2 @@
 [submodule "dev.xdark.ssvm"]
-	url = git@github.com:terminalsin/SSVM.git
+	url = https://github.com/terminalsin/SSVM.git

README.md

@@ -1,53 +1,64 @@
+![header](https://github.com/user-attachments/assets/65046709-27c3-417f-8053-3a6f8d5ea29d)
+
+---
 <p align="center">
-  <img width="15%" height="15%" src="https://i.imgur.com/RgDz1Qn.png" href="https://github.com/terminalsin/skidfuscator-java-obfuscator/releases">
-  <br>
-</p>
-<p align="center">
-  Skidfuscator: Obfuscation like never seen before.
-</p>
-<p align="center">
-  <a><img alt="Api Type" src="https://img.shields.io/badge/API-MapleIR-blue"></a>
-  <a><img alt="Authors" src="https://img.shields.io/badge/Authors-Ghast-blue"></a>
-  <a><img alt="Issues" src="https://img.shields.io/github/issues/terminalsin/skidfuscator-java-obfuscator"></a>
-  <a><img alt="Forks" src="https://img.shields.io/github/forks/terminalsin/skidfuscator-java-obfuscator"></a>
-  <a><img alt="Stars" src="https://img.shields.io/github/stars/terminalsin/skidfuscator-java-obfuscator"></a> 
   <h3 align="center">
-    Join the discord: https://discord.gg/QJC9g8fBU9
+    🗣️ Discord: https://discord.gg/QJC9g8fBU9  📚  Wiki: https://skidfuscator.dev/docs/
   </h3>
   <h3 align="center">
-    Wiki: https://skidfuscator.dev/docs/
+    🏢 Enterprise/Custom Version: https://skidfuscator.dev/pricing
   </h3>
 </p>
 
 ---
+
+> [!WARNING]
+> This product is provided as-is, licensed under [MIT](/LICENSE). We will not provide any support, nor take liability for
+> any reversal, deobfuscation, or impact this tool may have on your software. If you seek to protect sensitive applications
+> for commercial use, we recommend you contact us at mastermind [at] zenrho.net or visit https://zenrho.com 
+
+
+* [🚀 Quickstart](#-quickstart)
+    + [🔥 Homebrew (macOS)](#-homebrew-macos)
+    + [🔥 Bash (Linux/macOS)](#-bash-linuxmacos)
+    + [🔥 Powershell [Admin required] (Windows)](#-powershell-admin-required-windows)
+- [🕵️ What is Skidfuscator?](#-what-is-skidfuscator)
+- [✨ Features](#-features)
+    + [1. Automatic Dependency Downloading](#1-automatic-dependency-downloading)
+    + [2. Smart Recovery](#2-smart-recovery)
+    + [3. Auto Configuration](#3-auto-configuration)
+    + [4. Flow Obfuscation (GEN3)](#4-flow-obfuscation--gen3-)
+    + [5. Advanced Obfuscation Methods](#5-advanced-obfuscation-methods)
+    + [6. Optimization Out-of-the-Box](#6-optimization-out-of-the-box)
+- [🔥 Third Generation Flow](#-third-generation-flow)
+    + [Flow Obfuscation](#flow-obfuscation)
+    + [Encryption Obfuscation](#encryption-obfuscation)
+    + [Structure Obfuscation](#structure-obfuscation)
+    + [Miscelleanous](#miscelleanous)
+- [Credits](#credits)
+  * [Libraries used](#libraries-used)
+  * [Inspired from](#inspired-from)
+
 ## 🚀 Quickstart
 
 > [!TIP]
 > If you are using Gradle, consider using our [Gradle plugin](https://github.com/skidfuscatordev/skidfuscator-gradle-plugin) for easy integration.
 > ```java
 > plugins {
->    id("io.github.skidfuscatordev.skidfuscator") version "0.1.3"
+>      id("dev.skidfuscator") version "0.1.4"
 > }
 > 
 > skidfuscator {
 >   // Configure the plugin here
 >   skidfuscatorVersion = "latest"
->   exempt = ["com/example/SomeClass"]
->
->   transformers {
->       interprocedural {
->           enabled = true
->           exempt = ["com/example/IgnoredClass"]
->       }
->       stringEncryption {
->           type = "STANDARD"
->           enabled = true
->       }
->   }
 >}
 > ```
 
-You can download Skidfuscator [here](https://github.com/skidfuscatordev/skidfuscator-java-obfuscator/releases) and run it directly using:
+You can download Skidfuscator [here](https://github.com/skidfuscatordev/skidfuscator-java-obfuscator/releases) and run it directly.
+
+<details>
+<summary><h3>👉 CLI Usage/Install</h3></summary>
+
 ```
 java -jar skidfuscator.jar obfuscate <path to your jar>
 ```
@@ -71,33 +82,41 @@ curl -sL https://raw.githubusercontent.com/skidfuscatordev/skidfuscator-java-obf
 ```
 iex "& { $(iwr -useb https://raw.githubusercontent.com/skidfuscatordev/skidfuscator-java-obfuscator/refs/heads/master/scripts/install.ps1) }"
 ```
+</details>
 
 ## 🕵️ What is Skidfuscator?
-Skidfuscator is a proof of concept obfuscation tool designed to take advantage of SSA form to optimize and obfuscate Java bytecode
+Skidfuscator is a ~~proof of concept~~ ✨ **production** ✨ grade obfuscation tool designed to take advantage of SSA form to optimize and obfuscate Java bytecode
 code flow. This is done via intra-procedural passes each designed to mingle the code in a shape where neither the time complexity
 neither the space complexity suffers from a great loss. To achieve the such, we have modeled a couple of well known tricks to 
 add a significant strength to the obfuscation whilst at the same time retaining a stable enough execution time.
 
 Skidfuscator is now feature-complete and continues to be actively maintained with several new obfuscation techniques aimed at hardening your code against reverse engineering.
 
+<details>
+  <summary><h3>👉 Research Poster (Finalist CCSCNE 2024)</h3></summary>
+  
 ![Classic Landscape 1 (3) (1)](https://github.com/skidfuscatordev/skidfuscator-java-obfuscator/assets/30368557/9ab9a2ab-8df7-4e62-a711-4df5f3042947)
+</details>
 
-# ✨ Features 
+## ✨ Features 
 
+Skidfuscator is rich in over 10+ features. Our objective: **be one click, you're protected.** We provide a **GUI**, over **+10** configurable transfomers, we have failsafes and automatic tools to tailor your configuration to you with ease. 
+<details><summary><h3>👉 Expand features</h3></summary>
+  
 ### 1. Automatic Dependency Downloading
 Skidfuscator intelligently identifies and downloads missing dependencies needed for your project, minimizing manual configuration. Known frameworks such as Bukkit are automatically handled, streamlining setup.
 
-![autodepend](https://github.com/user-attachments/assets/958349aa-582b-4751-88e1-ed61408d24b8)
+https://github.com/user-attachments/assets/9c349e09-01da-4073-be69-f00211add72a
 
 ### 2. Smart Recovery
 In the event of errors or failed obfuscation, Skidfuscator implements a recovery system that intelligently resolves conflicts and provides suggestions to fix issues. This ensures minimal disruption in your development workflow.
 
-![FocuSee_Project_2024-12-18_03-32-25-ezgif com-optimize (1)](https://github.com/user-attachments/assets/af709b36-1031-4519-8e21-2ec63a245ffb)
+https://github.com/user-attachments/assets/d71f3a10-ebac-466c-9e8e-3bfcaf5177d5
 
 ### 3. Auto Configuration
 Skidfuscator comes with built-in presets for common configurations, allowing quick setup without needing to manually tweak every aspect of the obfuscation process. For advanced users, all settings remain fully customizable.
 
-![FocuSeeProject2024-12-1802-56-07-ezgif com-optimize](https://github.com/user-attachments/assets/591415a0-b8fe-46d6-a530-d7914c58f613)
+https://github.com/user-attachments/assets/fb6a5ac1-a739-4c83-a340-40e312016947
 
 ### 4. Flow Obfuscation (GEN3)
 Skidfuscator introduces third-generation control flow obfuscation (Flow GEN3), which scrambles method logic and makes the control flow harder to understand. This method introduces opaque predicates and complex flow redirections, hindering static and dynamic analysis.
@@ -110,53 +129,54 @@ Here are all the cool features I've been adding to Skidfuscator. It's a fun proj
 not to be commercial but to inspire some more clever approaches to code flow obfuscation, especially ones which make use of SSA and CFGs
 
 ![Cool gif](https://i.ibb.co/4MQnj4V/FE185-E3-B-0-D0-D-4-ACC-81-AA-A4862-DF01-FA3.gif)
+</details>
+
+## 🔥 Third Generation Flow
 
-## Third Generation Flow
+Skidfuscator boasts the **most complex**, research-backed flow obfuscation in the JVM community. Our flow obfuscation outperforms competitors such as [Zelix Klassmaster](https://zelix.com), [DexGuard](), and various others. And yes, we're open-source! 
+
+<details><summary><h3>👉 Expand transformers</h3></summary>
 
 ### Flow Obfuscation
-- [x] Bogus Exception Flow
-- [x] Bogus Condition Flow
-- [x] **NEW** ✨ Pure Function Hashing Flow
-- [x] Switch Flow
-- [x] Factory Initiation Flow (**Enterprise**)
-- [x] Integer Return Flow (**Enterprise**)
-- [x] Exception Return Flow (**Enterprise**)
+| **Feature**                          | **Edition**           | **Description**                                   |
+|--------------------------------------|------------------------|---------------------------------------------------|
+| Bogus Exception Flow                 | Community              | Adds fake exception handling to confuse reverse engineers. |
+| Bogus Condition Flow                 | Community              | Introduces fake conditions to disrupt program analysis. |
+| **NEW** ✨ Pure Function Hashing Flow | Community               | Hashes pure functions to obfuscate their flow and outputs. |
+| Switch Flow                          | Community               | Uses switch statements to obscure logic paths.    |
+| Factory Initiation Flow              | Community               | Obfuscates factory patterns, adding complexity to instance creation. |
+| Integer Return Flow                  | [**Enterprise**](https://skidfuscator.dev/pricing) | Obfuscates integer return values to mislead reverse engineering. |
+| Exception Return Flow                | [**Enterprise**](https://skidfuscator.dev/pricing) | Utilizes exceptions as a return flow to confuse the control path. |
 
 ### Encryption Obfuscation
-- [x] String Encryption
-- [x] Annotation Encryption (**Enterprise**)
-- [x] Reference Encryption (**Enterprise**)
+
+| **Feature**                          | **Edition**           | **Description**                                   |
+|--------------------------------------|------------------------|---------------------------------------------------|
+| String Encryption                    | Community  | Encrypts strings to prevent static analysis.      |
+| Annotation Encryption                | [**Enterprise**](https://skidfuscator.dev/pricing)  | Encrypts annotations to protect metadata from tampering. |
+| Reference Encryption                 | [**Enterprise**](https://skidfuscator.dev/pricing)  | Encrypts object references to add another layer of security. |
 
 ### Structure Obfuscation
-- [x] Field Renamer (**Enterprise**)
-- [x] Method Renamer (**Enterprise**)
-- [x] Class Renamer (**Enterprise**)
-- [x] Mixin Support (**Enterprise**)
-- [x] Spigot Plugin Support (**Enterprise**)
+| **Feature**                          | **Edition**           | **Description**                                   |
+|--------------------------------------|------------------------|---------------------------------------------------|
+| Field Renamer                        | [**Enterprise**](https://skidfuscator.dev/pricing)   | Renames fields to meaningless names to obscure their purpose. |
+| Method Renamer                       | [**Enterprise**](https://skidfuscator.dev/pricing)   | Renames methods to make reverse engineering more challenging. |
+| Class Renamer                        | [**Enterprise**](https://skidfuscator.dev/pricing)   | Renames classes to break readability and tooling compatibility. |
+| Mixin Support                        | [**Enterprise**](https://skidfuscator.dev/pricing)   | Adds support for obfuscating mixin-based systems. |
+| Spigot Plugin Support                | [**Enterprise**](https://skidfuscator.dev/pricing)   | Obfuscates Spigot plugins for enhanced security.  |
 
 ### Miscelleanous 
-- [x] Ahegao Trolling
-- [x] Driver Protection
-- [x] **Experimental** Outlining Obfuscation (**Enterprise**)
-- [x] Native Driver Protection (**Enterprise**)
-
-What is third generation flow obfuscation? Well, contrary to Zelix's [second generation flow obfuscation](https://www.zelix.com/klassmaster/featuresFlowObfuscation.html), we use an even more complex system with private and public seeds. Here's 
-how it works:
-
-<br>
-<br>
-
-![Exampel](https://i.imgur.com/j2tZavr.png)
-
-<sub>_Graph representing the two different approaches towards flow obfuscation between Zelix (17.0) and Skidfuscator (0.0.1)_</sub>
-<br>
-<br>
-<br>
+| **Feature**                          | **Edition**           | **Description**                                   |
+|--------------------------------------|------------------------|---------------------------------------------------|
+| Ahegao Trolling                      | Community              | Adds humorous or trolling elements to deter casual inspection. |
+| Driver Protection                    | Community              | Protects drivers from tampering or reverse engineering. |
+| **New** Outlining Obfuscation        | [**Enterprise**](https://skidfuscator.dev/pricing)           | Segments code into separate outlined functions for obfuscation. |
+| Native Driver Protection             | [**Enterprise**](https://skidfuscator.dev/pricing)           | Protects native drivers at the OS level for added security. |
+</details>
 
-We currently are working on a variety of ways to approach this system using various lightweight obfuscation methods. Here are the current ones
-to date:
+## Credits
 
-# Credits
+We'd like to extend our many thanks to the many individuals who have financially supported this project, supervised its research, or reported bugs. All contributions have curated this tool to achieve a production grade, and I could not be more thankful.
 
 ## Libraries used
 - [Maple IR and the Team](https://github.com/LLVM-but-worse/maple-ir)

SSVM

@@ -1,3 +1,6 @@
+import org.gradle.api.JavaVersion
+import org.gradle.api.tasks.compile.JavaCompile
+
 plugins {
     id 'java'
     id 'java-library'
@@ -16,11 +19,10 @@ allprojects {
         }
     }
 
-    apply plugin: 'java'
     apply plugin: 'java-library'
 
-    sourceCompatibility = 1.8
-    targetCompatibility = 1.8
+    sourceCompatibility = JavaVersion.VERSION_17
+    targetCompatibility = JavaVersion.VERSION_17
 
     dependencies {
         compileOnly 'org.projectlombok:lombok:1.18.36'
@@ -34,6 +36,26 @@ allprojects {
         options.encoding = "UTF-8" // Will fail on the non-ascii comments if not set
     }
 
+    tasks.withType(JavaCompile).configureEach {
+        if (sourceCompatibility == JavaVersion.VERSION_17) {
+            options.compilerArgs += [
+                '--add-exports', 'java.base/jdk.internal.reflect=ALL-UNNAMED',
+                '--add-exports', 'java.base/jdk.internal.util=ALL-UNNAMED',
+                '--add-exports', 'java.base/sun.io.ch=ALL-UNNAMED'
+        ]
+        }
+    }
+    tasks.withType(Test).configureEach {
+        if (sourceCompatibility == JavaVersion.VERSION_17) {
+            jvmArgs += [
+                '--add-exports', 'java.base/jdk.internal.reflect=ALL-UNNAMED',
+                '--add-exports', 'java.base/jdk.internal.util=ALL-UNNAMED',
+                '--add-exports', 'java.base/sun.io.ch=ALL-UNNAMED'
+        ]
+        }
+    }
+
+
     ext {
         asm = 'org.ow2.asm:asm:9.7.1'
         asm_commons = 'org.ow2.asm:asm-commons:9.7.1'

build.gradle

@@ -0,0 +1,7 @@
+<dependencies>
+    <dependency>
+        <groupId>com.google.code.gson</groupId>
+        <artifactId>gson</artifactId>
+        <version>2.10.1</version>
+    </dependency>
+</dependencies> 

dev.skidfuscator.client.standalone/pom.xml

@@ -1,6 +1,7 @@
 package dev.skidfuscator.obfuscator;
 
 import com.formdev.flatlaf.intellijthemes.FlatDarkPurpleIJTheme;
+import com.formdev.flatlaf.intellijthemes.FlatGradiantoMidnightBlueIJTheme;
 import dev.skidfuscator.obfuscator.command.HelpCommand;
 import dev.skidfuscator.obfuscator.command.MappingsCommand;
 import dev.skidfuscator.obfuscator.command.ObfuscateCommand;
@@ -16,7 +17,13 @@
 import picocli.CommandLine;
 
 import javax.swing.*;
+import java.awt.*;
 import java.io.File;
+import java.io.IOException;
+import java.net.URI;
+import java.net.URISyntaxException;
+import java.util.concurrent.CompletableFuture;
+import java.util.concurrent.TimeUnit;
 
 public class SkidfuscatorMain {
 
@@ -33,7 +40,41 @@ public static void main(String[] args) {
                 } catch (Exception e) {
                     e.printStackTrace();
                 }
-                new MainFrame().setVisible(true);
+
+                final int option = JOptionPane.showOptionDialog(
+                        null,
+                        "You are running Skidfuscator Community! Whilst this project is free and open-source, " +
+                                "we heavily encourage commercial users to support the project by purchasing enterprise" +
+                                " edition available on our website",
+                        "Notice!",
+                        JOptionPane.DEFAULT_OPTION,
+                        JOptionPane.INFORMATION_MESSAGE,
+                        UIManager.getIcon("OptionPane.informationIcon"),
+                        new Object[]{"OK", "Buy Enterprise", "Join the Discord"},
+                        "OK"
+                );
+
+                if (option == 0) {
+                    new MainFrame().setVisible(true);
+                    return;
+                }
+
+                final String url = switch (option) {
+                    case 1 -> "https://skidfuscator.dev/pricing";
+                    case 2 -> "https://discord.gg/QJC9g8fBU9";
+                    default -> throw new IllegalStateException("Impossible");
+                };
+
+                CompletableFuture.delayedExecutor(1, TimeUnit.SECONDS).execute(() -> {
+                    try {
+                        Desktop.getDesktop().browse(new URI(url));
+                    } catch (IOException | URISyntaxException e) {
+                        throw new RuntimeException(e);
+                    }
+                });
+                main(args);
+                return;
+
             });
             return;
         }

dev.skidfuscator.client.standalone/src/main/java/dev/skidfuscator/obfuscator/SkidfuscatorMain.java

@@ -6,7 +6,7 @@
 import java.awt.*;
 import java.io.File;
 
-public class ActionPanel extends JPanel {
+public class ActionPanel extends JPanel implements SkidPanel{
     private final MainFrame mainFrame;
     private final JTextArea logArea;
     private final JButton startButton;
@@ -40,6 +40,8 @@ public void startObfuscation() {
             return;
         }
 
+
+
         // Create session
         SkidfuscatorSession session = SkidfuscatorSession.builder()
                 .input(new File(config.getInputPath()))
@@ -48,10 +50,7 @@ public void startObfuscation() {
                         ? new File[0]
                         : new File(config.getLibsPath()).listFiles()
                 )
-                .runtime(config.getRuntimePath().isEmpty()
-                        ? null
-                        : new File(config.getRuntimePath())
-                )
+                .runtime(null)
                 .phantom(false)
                 .debug(config.isDebugEnabled())
                 .build();