💥牛逼！别再让AI随便拆你的项目了！这个开源神器能让逆向Agent自己走进迷宫，还不停烧钱！
This is a dev post classified by AGK Intelligence as Security (a tool drop), kept by the Dev Radar because it carries real work, not commentary.
💥牛逼！别再让AI随便拆你的项目了！这个开源神器能让逆向Agent自己走进迷宫，还不停烧钱！ BLA不是传统混淆，而是直接在发布包里埋假密钥、诱饵接口和干扰逻辑。AI一旦开始分析，就会顺着这些假线索越走越偏，同时大量消耗Token。 实测里作者拿真实REA验证过： 🔹加固后的JS直接触发预算上限 🔹Electron ASAR报容量错误 🔹WASM接口只能读出一部分内容 更关键的是，14个测试样本加固后，软件运行结果和原版完全一致，正常用户不受影响。 有项目的可以直接在目录里跑两步： 1️⃣npx bla-agents setup 接入Claude Code、Codex、Cursor等工具 2️⃣npx bla-agents harden . 自动扫描发布文件、加固并验证 一键提高AI逆向成本，软件本身照常能用。 项目地址：https://github.com/qybaihe/bla 官网：https://bla.tools/ #AI逆向 #BLA #REA #开源安全 #软件保护
Posted by SuSu_酥酥👅 (25k followers) 9 h ago · 20 likes · 2.3k views · view the original post on X. Kept by the Dev Radar as Security. Tools mentioned: bla, BLA: Blind LLM Agents, claude-anti-ban.
More dev work like this
- Most Reverse Engineer bots burn tokens decompiling everything first. — @PixelRainbowNFT
- A full open-source working collection of jailbreak — @0x0SojalSec
- Last Wednesday, Railway said hackers may have obtained decrypted API keys, database… — @every
- #PHP2Shell. The #LiteLLM supply chain compromise. #Brotli2Shell. — @jfrog
- gpt-oss-20b, thinking: "We have token. Avoid sharing, but we can pass it in the command." — @witcheer
- CVE-2024-21413: MonikerLink Outlook Vulnerability PoC — @DarkWebInformer
- CrowdStrike President Michael Sentonas joined Sascha Roehrer on deeptech INSIGHTS to… — @CrowdStrike
- I just shared this with my family, and you all should do it too. — @JJEnglert
Every post is read and classified by AGK Intelligence: what it is, which market it belongs to, and whether the link is a real tool. 31.2k posts from 5k X accounts over the last 21 days, 8.8k tools, 12 markets. New posts are collected several times an hour and the full ranking is recomputed every hour — last update 2026-10-30 22:12 UTC. Full method.