HimitsuShell compiles shell scripts into obfuscated binaries to protect source code from disclosure.
Features instruction substitution, indirect calls, indirect branches, basic block splitting, and bogus control flow.
Embeds its own shell interpreter, eliminating reliance on the system shell and reducing exposure to OS-level logging and hooking. (e.g., auditd).
All strings and constants in the binary are encrypted, making static analysis more difficult (e.g., IDA, Ghidra).
Continuously detects debuggers during execution, making dynamic analysis more difficult (e.g., gdb, ptrace, strace).
Restricts shell script execution to users with a valid license key.
- CPU: AMD x86_64, 2.5 GHz or higher (6 cores / 12 threads recommended)
- Memory: 16 GB RAM
- Storage: 10 GB available SSD/NVMe space
# 1. Load the Docker Image
docker load -i himitsu_core_v1.1.2.tar.gz
# 2. Start the Container
docker run --name himitsu_core -d -it himitsu_core:v1.1.2
# 3. Upload Your Shell Script (The filename must be "launcher.sh")
docker cp launcher.sh himitsu_core:/var/work/
# 4. Build the Protected Binary (10–20 min)
docker exec himitsu_core /var/work/compile.sh
# 5. Download the Generated Binary
docker cp himitsu_core:/var/work/safeLauncher .HimitsuShell is a commercial software product.
This repository does not contain the HimitsuShell source code.
It serves as the official community hub for:
- Discussions
- Bug reports
- Feature requests
- Shell Script-to-Binary Tools: shc vs. HimitsuShell
- shc Security Analysis: Structural Limitations of a Shell Script Compiler
- ssc Security Analysis: Structural Limitations of a Shell Script Compiler
We welcome questions, feedback, bug reports, feature requests, and use cases related to HimitsuShell. Feel free to start a discussion and share your thoughts.