Cheat Engine

[h3x1c]

I just spent the past 2 hours watching a couple of talks from this guy and reading up on his work. My mind is blown right now, lol. First, his C compiler that compiles an application into nothing but mov instructions:

https://github.com/xoreaxeaxeax/movfuscator

Watch his talk about it here (it's actually very entertaining and not at all boring or even too complex): The MoVfuscator: Turning mov into a soul crushing RE nightmare - Christopher Domas

Can you imagine trying to read through that shit when disassembling or trying to create code injections for AOB scans? lol. I imagine there would be plugins and what not to de-obfuscate that stuff, but good grief, what a task...

Anyway, the other talk, which is SERIOUSLY engaging, is one he gave at BlackHat 2015 regarding an exploit he figured out to get ring -2 privilege as a ring 3 user due to an x86 design flaw: The Memory Sinkhole - Unleashing An X86 Design Flaw Allowing Universal Privilege Escalation

(Maybe that last one is something to consider for CE, Dark Byte? )

[Dark Byte]

reversing is difficult yes, but cheats and aob's shouldn't be too difficult. (it's not even polymorphic).

smm is interesting, but ring -1 lets me have enough control for now (dbvm is a hypervisor and in there i also have the ability to hide physical memory and to obtain kernelmode access from usermode.)

[pkedpker]

I would use this MOV program as my program's obfuscator as it seems unbreakable and even IDA PRO crashes on it instantly..

only problem with it, it goes goes in one direction downwards so if you want to run a loop you would have to run the whole program of mov's from top to bottom just to process one loop and this is pretty nuts rofl, if he can solve that issue by atleast breaking his mov only rule and adding some real asm loops, I think it would be a perfect obfuscator don't you think?