Reverse Engineering Tiktok's VM Obfuscation (Part 1)

Dropped a new blog post where I detail the start of my journey into TikTok's VM based obfuscation.

So far only covers the discovery of the script and how I dumped strings from each "program"

https://nullpt.rs/reverse-engineering-tiktok-vm-1

#tiktok #vm #reverseengineering #javascript #obfuscation #deobfuscation

Reverse Engineering Tiktok's VM Obfuscation (Part 1)

TikTok has a reputation for its aggressive data collection. The platform has implemented various methods to make it difficult for reverse-engineers to understand exactly what data is being collected and how it is being used.

@voidstar Amazing blog post! Wild how WebGL can be used for fingerprinting
@0xdema I’m always surprised by how people repurpose various APIs for fingerprinting.
@voidstar Well done! Looking forward to part 2
@voidstar awesome reading, thank you!
@voidstar Amazing, this is right up my alley (so much so that I decided to sign up on this instance)!
@hannula glad to have you here!
@voidstar Very interesting read... I'm always impressed with folks like you able to crawl up the tree so much!
@voidstar
Thanks for a great RE journey. Quite disturbing how they go through all these loops to hide how much they send back and how they fingerprint everyone.
@voidstar This was awesome! Looking forward to Part 2..N!

@voidstar this was a great article, i am looking forward to part 2 ^

i knew there was a lot going on in the mobile apps, but i didn't know there was this much obfuscation and tracking in the webapp

Reverse Engineering TikTok's VM Obfuscation | Ibiyemi Abiodun