https://github.com/jeromer/mumbojumbo

Obfuscates golang strings
https://github.com/jeromer/mumbojumbo

golang obfuscation security

Last synced: 4 months ago
JSON representation

Obfuscates golang strings

• Host: GitHub
• URL: https://github.com/jeromer/mumbojumbo
• Owner: jeromer
• License: bsd-3-clause
• Created: 2019-01-18T08:52:42.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2022-12-03T15:47:59.000Z (over 3 years ago)
• Last Synced: 2025-08-14T05:04:00.307Z (11 months ago)
• Topics: golang, obfuscation, security
• Language: Go
• Size: 6.84 KB
• Stars: 61
• Watchers: 1
• Forks: 5
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# Mumbo jumbo

A small tool to obfuscate strings in your Go code

## Description

When you want to store specific strings in your go code they are automatically

searchable in the go binary.

For example take the following code (`x.go`):

```go

    package main

    import (

        "fmt"

    )

    const (

        C = "hello"

    )

    func main() {

        fmt.Println(C)

    }

```

Now run `go build ./x.go` to build it and the run `strings ./x | grep hello`.

Surprise ! `hello` is visible to anyone who has access the go binary.

[mumbojumbo](https://github.com/jeromer/mumbojumbo) tries to mitigate this

problem by obfuscating the string so it is no longer searchable with

[strings](https://linux.die.net/man/1/strings).

## Getting Started

You can install mumbojumbo by running:

    go get github.com/jeromer/mumbojumbo/...

## Usage

Once [mumbojumbo](https://github.com/jeromer/mumbojumbo) is installed just run:

    mumbojumbo -s=foo -p=bar

where `foo` is the string you want to obfuscate and `bar` is the name of the go

package which will be generated.

For example, imagine I want to obfuscate the string `some secret` in pkg

`foo`:

    mumbojumbo -s="some secret" -p=foo | goimports > foo.go

The following code will be generated:

```go

// CODE GENERATED BY mumbojumbo 1.0 (https://github.com/jeromer/mumbojumbo) DO NOT EDIT !!!!

package foo

import (

	"unsafe"

)

const (

	EAX = uint8(unsafe.Sizeof(true))

)

func Get() string {

	return string(

		[]byte{

			((((EAX<