{"action":"created","issue":{"url":"https://api.github.com/repos/java-deobfuscator/deobfuscator/issues/242","repository_url":"https://api.github.com/repos/java-deobfuscator/deobfuscator","labels_url":"https://api.github.com/repos/java-deobfuscator/deobfuscator/issues/242/labels{/name}","comments_url":"https://api.github.com/repos/java-deobfuscator/deobfuscator/issues/242/comments","events_url":"https://api.github.com/repos/java-deobfuscator/deobfuscator/issues/242/events","html_url":"https://github.com/java-deobfuscator/deobfuscator/issues/242","id":322245365,"number":242,"title":"Allatori ? can't deobfuscate","user":{"login":"gesucanez","id":39183795,"avatar_url":"https://avatars2.githubusercontent.com/u/39183795?v=4","gravatar_id":"","url":"https://api.github.com/users/gesucanez","html_url":"https://github.com/gesucanez","followers_url":"https://api.github.com/users/gesucanez/followers","following_url":"https://api.github.com/users/gesucanez/following{/other_user}","gists_url":"https://api.github.com/users/gesucanez/gists{/gist_id}","starred_url":"https://api.github.com/users/gesucanez/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gesucanez/subscriptions","organizations_url":"https://api.github.com/users/gesucanez/orgs","repos_url":"https://api.github.com/users/gesucanez/repos","events_url":"https://api.github.com/users/gesucanez/events{/privacy}","received_events_url":"https://api.github.com/users/gesucanez/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2018-05-11T10:19:37Z","updated_at":"2018-05-15T18:43:20Z","closed_at":null,"author_association":"NONE","body":"Hi guys,\r\n\r\ncan't deobfuscate this jar https://www70.zippyshare.com/v/VBpIAZpD/file.html\r\n\r\nsome times ago it was protected with allatori and checking with jd-gui i think it's again allatori but updated.\r\ntried some techniques but nothing.\r\n\r\ncan you help me ? \r\nty\r\n"},"comment":{"url":"https://api.github.com/repos/java-deobfuscator/deobfuscator/issues/comments/389271872","html_url":"https://github.com/java-deobfuscator/deobfuscator/issues/242#issuecomment-389271872","issue_url":"https://api.github.com/repos/java-deobfuscator/deobfuscator/issues/242","id":389271872,"user":{"login":"ItzSomebody","id":23221108,"avatar_url":"https://avatars2.githubusercontent.com/u/23221108?v=4","gravatar_id":"","url":"https://api.github.com/users/ItzSomebody","html_url":"https://github.com/ItzSomebody","followers_url":"https://api.github.com/users/ItzSomebody/followers","following_url":"https://api.github.com/users/ItzSomebody/following{/other_user}","gists_url":"https://api.github.com/users/ItzSomebody/gists{/gist_id}","starred_url":"https://api.github.com/users/ItzSomebody/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ItzSomebody/subscriptions","organizations_url":"https://api.github.com/users/ItzSomebody/orgs","repos_url":"https://api.github.com/users/ItzSomebody/repos","events_url":"https://api.github.com/users/ItzSomebody/events{/privacy}","received_events_url":"https://api.github.com/users/ItzSomebody/received_events","type":"User","site_admin":false},"created_at":"2018-05-15T18:43:20Z","updated_at":"2018-05-15T18:43:20Z","author_association":"NONE","body":"@gesucanez that jar you provided isn't zelix flow obfuscation. I was referring to the flow signatures left by Allatori. ThisTestUser has a fork of Java-Deobfuscator over (https://github.com/ThisTestUser/deobfuscator)[here] (allatori.FlowObfuscationTransformer)which can restore a decent version of what the bytecode might have looked like before transformation by Allatori.\r\n\r\nTo deobfuscate the sample you provided, use allatori.FlowObfuscationTransformer then allatori.StringEncryptionTransformer from ThisTestUser's fork."}}
{"actor":{"display_login":"ItzSomebody"}}