xorhex logo

xorhex

Focus on Threat Research Things.

Z3 Solver Simplifying String Decryption

Notes on using Z3 Solver to simplify string deobfuscation

xorhex

8-Minute Read

Z3 Simplifying String Decryption Blog Header Picture

Z3 Solver aids in simplifying deobfuscation techinques. This post covers 2 example use cases where a convoluted string decryption routine is broken down and simplified into a single XOR operation. Z3 is used to prove that the extra parts of the decryption routine cancel each other out.

Recent Posts

Categories

About

Hosting my custom tools, threat research, and general reverse engineering notes.