kagura
LLVM pass plugin for native code obfuscation, anti-cheat, and anti-tamper. CFG flattening, string encryption, VM virtualization.
Yoshiki Kusama
@qusamulab
Newbie independent security researcher
- Repositories
- –
- Stars
- –
- Followers
- –
$ ls tools/
Open-source tools
fuin
Web-based Android APK packer. Encrypts DEX bytecode, native libraries, and assets with AES-256-GCM. Supports Unity, multidex, and standard apps.
shirayuki
Runtime memory toolkit for jailbroken iOS. Scan, patch, freeze, and pointer scan with an in-app overlay GUI.
shingan
Static + dynamic security analysis for iOS and Android apps. Maps reverse-engineering exposure to OWASP MASVS.
memdroid
ADB-based memory modification tool for rooted Android devices.
enma
Frida-based Android analyzer toolkit. Dynamic analysis, hooking, tracing.
pypproxy
MITM HTTP/HTTPS proxy for inspecting and modifying traffic. GUI/CUI, rule engine, GraphQL support.
tadori
Entry-point-aware capability detection for Android APKs. Matches DEX bytecode against YAML rules, maps to MITRE ATT&CK for Mobile, and traces the call chain from each entry point.
aioq
Async job queue for Python. Redis / PostgreSQL / MySQL backends, priority queues, job dependencies, dead letter queues, cron scheduling, and a built-in real-time dashboard.
hazure
A lightweight toolkit for rule-based and unsupervised anomaly detection in time series. Learns what “normal” looks like from the series itself. Works with pandas, polars, and pyarrow.
pylightningfx
Python client for the bitFlyer Lightning API. Every public and private endpoint with Pydantic models, an identical asyncio surface, the realtime WebSocket API, request signing, and rate limiting.
$ find papers/ -name "*.pdf"
Research papers
-
Kagura: A Game Anti-Cheat Obfuscation Toolkit for the LLVM New Pass Manager
Abstract
An open-source LLVM New Pass Manager obfuscation and anti-tamper toolkit for mobile game anti-cheat binaries on iOS and Android. Provides nine composable LLVM passes including control-flow flattening, bogus control flow, instruction substitution, string encryption, constant obfuscation, memory-value obfuscation, indirect branching, and basic-block splitting/reordering. Includes IL2CPP-aware string handling and dual-XOR tamper detection.
-
Logic Privacy for Game Anti-Cheat Systems: Formal Foundations and Homomorphic Evaluation
Abstract
A framework for hiding anti-cheat detection logic via server-side fully homomorphic encryption (FHE). Clients encrypt game state under a public key; the server evaluates detection functions over ciphertexts, returning only a binary verdict. Proves logic secrecy and soundness under LWE, and proposes a randomized response mechanism against adaptive oracle queries.
-
Fourier-Polynomial Features for Obfuscation-Robust Android Malware Detection
Abstract
Spectral feature extraction framework for Android malware detection. Extracts normalized power spectra from raw DEX bytecode and compresses them into compact feature vectors via polynomial approximation — robust against graph-preserving obfuscation.
$ cat skills.txt
Skills
- Python
- Mobile Security
- Trust & Safety
- LLM Security
- Malware Analysis
- Reverse Engineering
- Frida
- Machine Learning
- Apache Airflow
$ git log --graph