kiteshield | Packer/Protector for x86-64 ELF binaries on Linux | Reverse Engineering library

kiteshield is a C library typically used in Utilities, Reverse Engineering applications. kiteshield has no bugs, it has no vulnerabilities, it has a Permissive License and it has low support. You can download it from GitHub.

A packer/protector for x86-64 ELF binaries on Linux. Kiteshield wraps ELF binaries with multiple layers of encryption and injects them with loader code that decrypts, maps, and executes the packed binary entirely in userspace. A ptrace-based runtime engine ensures that only functions in the current call stack are decrypted at any given time and additionally implements a variety of anti-debugging techniques in order to make packed binaries as hard to reverse-engineer as possible. See the Architecture and Codebase Layout sections below for a bird's-eye view of how Kiteshield works. Kiteshield is intended to be a fun academic exercise in binary obfuscation rather than something that can be used in the real world given the source code, and thus how it works, is public. Named for the shields preferred by the Normans in the 11th century (alternatively: the kiteshields that are so prevalent in Old School Runescape).