Shell to Obfuscated Binary
Beyond shc: Embedded Shell Interpreter & Advanced Obfuscation for Shell Script Protection.
Embedded Linux Devices
IoT & Network Devices
Linux Server & Docker Containers
Features
OS-Level Logging & Hooking Protection
Embeds its own shell interpreter, eliminating reliance on the system shell and reducing exposure to OS-level
logging and hooking. (e.g., auditd).
String & Constant Encryption
All strings and constants in the binary are encrypted, making static analysis more difficult (e.g., IDA,
Ghidra).
Debugger Detection
Continuously detects debuggers during execution, making dynamic analysis more difficult (e.g., gdb, ptrace,
strace).
Advanced Obfuscation Techniques
Features instruction substitution, indirect calls, indirect branches, basic block splitting, and bogus control
flow.
Simple Local Edition Usage
Use the Local Edition with just a few commands.
License Verification (Planned)
Restricts shell script execution to users with a valid license key.
Compared to shc
shc
OS-Level Logging & Hooking Protection
✓
Dynamic Library Hooking Protection
✓
String & Constant Encryption
✓
Debugger Detection
✓
✓
Advanced Obfuscation Techniques
✓
Purchase
Web (Free)
For fast and easy use
Unlimited usage in the browser
OS-Level Logging & Hooking Protection
Dynamic Library Hooking Protection
String & Constant Encryption
Debugger Detection
Indirect Calls
Instructions Substitution
Local Edition
+ 1 year of free updates (additional year $99)
Provided as a Docker Image
One-time purchase, no expiration
All protections run at maximum strength
All the features in Web, and more:
Bogus Control Flow
Indirect Branch
Basic Block Splitting
Enterprise
For teams facing complex challenges
Source Code Access for Review
Deployment & Integration Support
Security certification support
Custom contract support
Custom security support
Dedicated support
Guided Proof of Concept (PoC) program
Contact (Starting from $1,000)
Our Sponsors
Supported by the Pyeongtaek Industrial Promotion Agency (South Korea), a government-affiliated public institution. We also collaborate with the following organizations.
FAQ
Which Linux shells are supported?
Supports POSIX/LSB-compliant shells (e.g., /bin/sh).
Which shell commands are supported?
The commands listed below are built into the binary. Other commands also work, but they rely on the system shell
and may be exposed to hooking or logging.
basename bash blkdiscard blkid blockdev bunzip2 bzcat cal cat chattr chgrp chmod chown chroot chrt chvt cksum
clear cmp comm count cp cpio crc32 cut date dd deallocvt devmem df dirname dmesg dnsdomainname dos2unix du echo
egrep eject env expand factor fallocate false fgrep file find flock fmt fold free freeramdisk fsfreeze fstype
fsync ftpget ftpput getconf getopt gpiodetect gpiofind gpioget gpioinfo gpioset grep groups gunzip halt hd head
help hexedit host hostname httpd hwclock i2cdetect i2cdump i2cget i2cset i2ctransfer iconv id ifconfig inotifyd
insmod install ionice iorenice iotop kill killall killall5 link linux32 ln logger login logname losetup ls
lsattr lsmod lspci lsusb makedevs mcookie md5sum memeater microcom mix mkdir mkfifo mknod mkpasswd mkswap mktemp
modinfo mount mountpoint mv nbd-client nbd-server nc netcat netstat nice nl nohup nologin nproc nsenter od oneit
openvt partprobe paste patch pgrep pidof ping ping6 pivot_root pkill pmap poweroff printenv printf prlimit ps
pwd pwdx pwgen readahead readelf readlink realpath reboot renice reset rev rfkill rm rmdir rmmod rtcwake sed seq
setfattr setsid sh sha1sum sha224sum sha256sum sha384sum sha3sum sha512sum shred shuf sleep sntp sort split stat
strings su swapoff swapon switch_root sync sysctl tac tail tar taskset tee test time timeout top touch true
truncate ts tsort tty tunctl uclampset ulimit umount uname unicode uniq unix2dos unlink unshare uptime usleep
uudecode uuencode uuidgen vconfig vmstat w watch watchdog wc wget which who whoami xargs xxd yes zcat
Do Bash or Zsh scripts work?
They work, but errors can occur. We recommend testing before use.
Which platforms are supported?
Currently supports Linux x86_64 (Ubuntu, CentOS, Red Hat, Debian, Fedora, etc.).
Support for ARM64 (AArch64), ARMv7, and RISC-V 64 is currently in development. If you need early support, please contact us.
Additional targets available upon request: ARM, i586/i686, LoongArch64, MIPS, PowerPC, riscv32, and s390x.
Support for ARM64 (AArch64), ARMv7, and RISC-V 64 is currently in development. If you need early support, please contact us.
Additional targets available upon request: ARM, i586/i686, LoongArch64, MIPS, PowerPC, riscv32, and s390x.
Is my code secure?
Yes. In the Web edition, your code and build output are automatically deleted after compilation, and HimitsuShell
does not access or expose your code.
The Local Edition runs entirely on your computer — your code never leaves your computer.
The Local Edition runs entirely on your computer — your code never leaves your computer.
What is the difference between Personal and Company licenses?
The only difference is who owns the license. Choose Personal if you are an individual developer, or Company if the
license will be owned or used by a company.
How is the Local Edition delivered after purchase?
Once payment is confirmed, the Local Edition will be sent to the email address used for purchase within 24 hours.
If you don't see it, please check your spam folder. The email will include the Docker image for HimitsuShell –
Local Edition, a user guide, Terms of Service, and Privacy Policy. Please read the guide before using the product.
How do updates work for the Local Edition?
Your purchase includes all updates for 1 year, delivered to the email address used for purchase as they are
released. Afterward, renew for an additional year ($99) or keep your current version. A renewal link will be sent
3 months before your update period expires.
Can I install the Local Edition on multiple computers?
You can install the Local Edition on any computers required for your work.
Contact
We welcome all inquiries.
Email us below, and we’ll respond within 24 hours.
Email us below, and we’ll respond within 24 hours.