proguard+jd-gui进行代码混淆保护

需求：防止编译后的.class文件被破解导致代码泄露。

下载Proguard

proguard是用来进行.class文件编译混淆的工具

https://sourceforge.net/projects/proguard/files/latest/download?source=files

目前下载的是：proguard5.3.5.zip

 

下载jd-gui

jd是用来进行.class文件反编译的工具，方便查看编译后的.class文件是否达到预期

http://jd.benow.ca/

在JD-GUI区域选择Download-> jd-gui-windows-1.4.0.zip

解压后直接双击jd-gui.exe使用

proguard的使用

proguard主要用到的是lib\proguard.jar和bat\proguardgui.bat

proguard.jar用来混淆.class文件的名称及内容

proguardgui.bat用来生成执行proguard.jar的pro文件，决定混淆的内容及格式

 

Pro文件生成

双击打开bat\proguardgui.bat



PS：如果已经有存在pro文件，可点击Load configuration…载入配置文件



点击Addinput…添加需要进行混淆的jar包

点击Addoutput…添加混淆后jar包的存放地址，指定一个目录即可

library中添加不进行混淆的jar包，默认添加jre的jar包

*注意：progurad中不支持war包的混淆，使用war包进行混淆后会丢失所有的.class文件，所以需要将war包导出jar包进行混淆后，再使用压缩文件将混淆后的.class文件放入war包中。使用maven生成的war包可在pom.xml文件中修改<packaging>war</packaging>为<packaging>jar</packaging>，然后进行maven build生成jar包。









以上步骤根据需求进行选择，目前选择的都是一些基本选项



最后点击Saveconfiguration…保存配置，一般以.pro格式结尾

proguardgui并不适合用来执行脚本，最好还是使用cmd窗口来执行脚本

生成后的pro文件需要进行一些修改才能执行成功

基本需要修改的是一些固定使用的class名称及方法名，配置在.xml文件中的所有包名等。

enum相关的代码也需要设置不混淆。

执行proguard.jar

java –Xms1024m –Xmx2048m –jar proguard5.3.3\lib\proguard.jar@xxx.pro > run-service.log

注意修改proguard.jar和pro文件的路径

一些参数：

-dontusemixedcaseclassnames：Windows必须设置的参数，混淆后的class文件名不使用大小写区分

-keep class java.**{*;}：不混淆所有java开头的包名下的所有class文件

-keepclasseswithmembernames class com.xxx.x{public<methods>;}：不混淆x文件的public方法名，*表示不混淆所有内容

com.xxx.xxx$*{}：不混淆内嵌类

问题：

1、 执行proguard脚本时异常，查看log输出【Theoutput seems up to date】，是由于JDK版本问题，添加【-target1.7】后执行成功。

2、 执行脚本时闪退，可能是jdk版本的问题，更改到1.8执行成功后再更改到1.7执行。

3、 还有一些奇奇怪怪的问题，比如说混淆的jar包内的jar包还引用了其他jar包，就无法控制它不进行混淆，就需要找开发帮忙把第二层jar包依赖的jar包提取到同等级中。（可能描述的不是很清楚）

4、实在定位不到的问题只能使用排除法进行定位……

将所有需要用到的jar包混淆完后，重新导出war包进行替换。
注意所有有关系的jar包都需要一起进行混淆，这样它就会自动将有关联的内容统一混淆。

完整pro代码：

-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\analysis-0.0.1-SNAPSHOT.jar'
#-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\Antlr4Cobol-0.0.1-SNAPSHOT.jar'
-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\Antlr4Cpp-0.0.1-SNAPSHOT.jar'
-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\Antlr4ESP-0.0.1-SNAPSHOT.jar'
##
#-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\Antlr4Java-0.0.1-SNAPSHOT.jar'
-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\xxxxUtil-0.0.1-SNAPSHOT.jar'
-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\xxxx_Service_Api-0.0.3-SNAPSHOT.jar'
-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\xxxx_Transformation-0.0.1-SNAPSHOT.jar'
-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\bre-0.0.1-SNAPSHOT.jar'
-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\cobol-0.0.1-SNAPSHOT.jar'
-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\CodeClassifier-0.0.1-SNAPSHOT.jar'
-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\common-0.0.1-SNAPSHOT.jar'
##
#-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\ControlFlow-0.0.1-SNAPSHOT.jar'
-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\duplicate-xml-parser-0.0.1-SNAPSHOT.jar'
-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\java-0.0.1-SNAPSHOT.jar'
##
#-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\Neo4j-0.0.1-SNAPSHOT.jar'
-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\PL1-0.0.1-SNAPSHOT.jar'
-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\PatternEngine-0.0.1-SNAPSHOT.jar'
-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\ResourceManager-0.0.1-SNAPSHOT.jar'
-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\repository-0.0.1-SNAPSHOT.jar'

-injars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service-classes.jar'
#-injars xxxx_Service.jar
-outjars output\lib

-libraryjars 'C:\Program Files\Java\jre7\lib\rt.jar'
#-libraryjars 'D:\DEV\JDK\jdk1.8.0_112\jre\lib\rt.jar'
-libraryjars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib'
-libraryjars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\c3p0-0.9.1.1.jar'
-libraryjars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\mysql-connector-java-5.1.21.jar'
#-libraryjars 'D:\DEV\Maven\Repository\org\apache\lucene\lucene-core\3.6.2\lucene-core-3.6.2.jar'
#-libraryjars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\spring-webmvc-4.0.5.RELEASE.jar'
#-libraryjars 'I:\workspace_xxxx\xxxx_Service\target\xxxx_Service\WEB-INF\lib\spring-webmvc-4.0.7.RELEASE.jar'

-target 1.7
-dontshrink
-dontoptimize
-dontusemixedcaseclassnames
-keepattributes Exceptions,InnerClasses,Signature,Deprecated,SourceFile,LineNumberTable,LocalVariable*Table,*Annotation*,Synthetic,EnclosingMethod
-dontwarn

#java.jar
-keep class java.** {*;}
-keep class javax.** {*;}
-keep class org.** {*;}
#-keep class org.apache.**{*;}
-keep class scala.**{*;}
-keep class antlr.**{*;}
-keep class javassist.**{*;}
-keep class junit.**{*;}
-keep class net.**{*;}
-keep public class com.mysql.**

#xxxx-service
-keepclasseswithmembernames class com.xxxxxx.migrationtool.callgraph.SvgCallGraphBuilderImpl {public <methods>;}
-keepclasseswithmembernames class com.xxxxxx.migrationtool.merger.*{public <methods>;}
-keepclasseswithmembernames class com.xxxxxx.migrationtool.entity.MissingItem$MissingItemType{*;}
-keep class com.xxxxxx.migrationtool.parser.cobol.Sql*{public <methods>;}
-keepclasseswithmembernames class com.xxxxxx.migrationtool.esp.parsing.ESPParser$*{public <methods>;}

-keep class com.mysql.jdbc.**{*;}
-keep class com.mchange.**{*;}
-keep class com.alibaba.**{*;}
-keep class com.google.**{*;}

# Keep - Servlets. Keep all extensions of javax.servlet.Servlet.
-keep public class * extends javax.servlet.Servlet

# Also keep - Enumerations. Keep the special static methods that are required in
# enumeration classes.
-keepclassmembers enum * {
public static **[] values();
public static ** valueOf(java.lang.String);
}

# Also keep - Database drivers. Keep all implementations of java.sql.Driver.
-keep class * extends java.sql.Driver

# Keep names - Native method names. Keep all native class/method names.
-keepclasseswithmembers,includedescriptorclasses,allowshrinking class * {
native <methods>;
}

# Keep names - _class method names. Keep all .class method names. This may be
# useful for libraries that will be obfuscated again with different obfuscators.
-keepclassmembers,allowshrinking class * {
java.lang.Class class$(java.lang.String);
java.lang.Class class$(java.lang.String,boolean);
}

# Remove - System method calls. Remove all invocations of System
# methods without side effects whose return values are not used.
-assumenosideeffects public class java.lang.System {
public static long currentTimeMillis();
static java.lang.Class getCallerClass();
public static int identityHashCode(java.lang.Object);
public static java.lang.SecurityManager getSecurityManager();
public static java.util.Properties getProperties();
public static java.lang.String getProperty(java.lang.String);
public static java.lang.String getenv(java.lang.String);
public static java.lang.String mapLibraryName(java.lang.String);
public static java.lang.String getProperty(java.lang.String,java.lang.String);
}

# Remove - Math method calls. Remove all invocations of Math
# methods without side effects whose return values are not used.
-assumenosideeffects public class java.lang.Math {
public static double sin(double);
public static double cos(double);
public static double tan(double);
public static double asin(double);
public static double acos(double);
public static double atan(double);
public static double toRadians(double);
public static double toDegrees(double);
public static double exp(double);
public static double log(double);
public static double log10(double);
public static double sqrt(double);
public static double cbrt(double);
public static double IEEEremainder(double,double);
public static double ceil(double);
public static double floor(double);
public static double rint(double);
public static double atan2(double,double);
public static double pow(double,double);
public static int round(float);
public static long round(double);
public static double random();
public static int abs(int);
public static long abs(long);
public static float abs(float);
public static double abs(double);
public static int max(int,int);
public static long max(long,long);
public static float max(float,float);
public static double max(double,double);
public static int min(int,int);
public static long min(long,long);
public static float min(float,float);
public static double min(double,double);
public static double ulp(double);
public static float ulp(float);
public static double signum(double);
public static float signum(float);
public static double sinh(double);
public static double cosh(double);
public static double tanh(double);
public static double hypot(double,double);
public static double expm1(double);
public static double log1p(double);
}

# Remove - Number method calls. Remove all invocations of Number
# methods without side effects whose return values are not used.
-assumenosideeffects public class java.lang.* extends java.lang.Number {
public static java.lang.String toString(byte);
public static java.lang.Byte valueOf(byte);
public static byte parseByte(java.lang.String);
public static byte parseByte(java.lang.String,int);
public static java.lang.Byte valueOf(java.lang.String,int);
public static java.lang.Byte valueOf(java.lang.String);
public static java.lang.Byte decode(java.lang.String);
public int compareTo(java.lang.Byte);
public static java.lang.String toString(short);
public static short parseShort(java.lang.String);
public static short parseShort(java.lang.String,int);
public static java.lang.Short valueOf(java.lang.String,int);
public static java.lang.Short valueOf(java.lang.String);
public static java.lang.Short valueOf(short);
public static java.lang.Short decode(java.lang.String);
public static short reverseBytes(short);
public int compareTo(java.lang.Short);
public static java.lang.String toString(int,int);
public static java.lang.String toHexString(int);
public static java.lang.String toOctalString(int);
public static java.lang.String toBinaryString(int);
public static java.lang.String toString(int);
public static int parseInt(java.lang.String,int);
public static int parseInt(java.lang.String);
public static java.lang.Integer valueOf(java.lang.String,int);
public static java.lang.Integer valueOf(java.lang.String);
public static java.lang.Integer valueOf(int);
public static java.lang.Integer getInteger(java.lang.String);
public static java.lang.Integer getInteger(java.lang.String,int);
public static java.lang.Integer getInteger(java.lang.String,java.lang.Integer);
public static java.lang.Integer decode(java.lang.String);
public static int highestOneBit(int);
public static int lowestOneBit(int);
public static int numberOfLeadingZeros(int);
public static int numberOfTrailingZeros(int);
public static int bitCount(int);
public static int rotateLeft(int,int);
public static int rotateRight(int,int);
public static int reverse(int);
public static int signum(int);
public static int reverseBytes(int);
public int compareTo(java.lang.Integer);
public static java.lang.String toString(long,int);
public static java.lang.String toHexString(long);
public static java.lang.String toOctalString(long);
public static java.lang.String toBinaryString(long);
public static java.lang.String toString(long);
public static long parseLong(java.lang.String,int);
public static long parseLong(java.lang.String);
public static java.lang.Long valueOf(java.lang.String,int);
public static java.lang.Long valueOf(java.lang.String);
public static java.lang.Long valueOf(long);
public static java.lang.Long decode(java.lang.String);
public static java.lang.Long getLong(java.lang.String);
public static java.lang.Long getLong(java.lang.String,long);
public static java.lang.Long getLong(java.lang.String,java.lang.Long);
public static long highestOneBit(long);
public static long lowestOneBit(long);
public static int numberOfLeadingZeros(long);
public static int numberOfTrailingZeros(long);
public static int bitCount(long);
public static long rotateLeft(long,int);
public static long rotateRight(long,int);
public static long reverse(long);
public static int signum(long);
public static long reverseBytes(long);
public int compareTo(java.lang.Long);
public static java.lang.String toString(float);
public static java.lang.String toHexString(float);
public static java.lang.Float valueOf(java.lang.String);
public static java.lang.Float valueOf(float);
public static float parseFloat(java.lang.String);
public static boolean isNaN(float);
public static boolean isInfinite(float);
public static int floatToIntBits(float);
public static int floatToRawIntBits(float);
public static float intBitsToFloat(int);
public static int compare(float,float);
public boolean isNaN();
public boolean isInfinite();
public int compareTo(java.lang.Float);
public static java.lang.String toString(double);
public static java.lang.String toHexString(double);
public static java.lang.Double valueOf(java.lang.String);
public static java.lang.Double valueOf(double);
public static double parseDouble(java.lang.String);
public static boolean isNaN(double);
public static boolean isInfinite(double);
public static long doubleToLongBits(double);
public static long doubleToRawLongBits(double);
public static double longBitsToDouble(long);
public static int compare(double,double);
public boolean isNaN();
public boolean isInfinite();
public int compareTo(java.lang.Double);
public byte byteValue();
public short shortValue();
public int intValue();
public long longValue();
public float floatValue();
public double doubleValue();
public int compareTo(java.lang.Object);
public boolean equals(java.lang.Object);
public int hashCode();
public java.lang.String toString();
}

# Remove - String method calls. Remove all invocations of String
# methods without side effects whose return values are not used.
-assumenosideeffects public class java.lang.String {
public static java.lang.String copyValueOf(char[]);
public static java.lang.String copyValueOf(char[],int,int);
public static java.lang.String valueOf(boolean);
public static java.lang.String valueOf(char);
public static java.lang.String valueOf(char[]);
public static java.lang.String valueOf(char[],int,int);
public static java.lang.String valueOf(double);
public static java.lang.String valueOf(float);
public static java.lang.String valueOf(int);
public static java.lang.String valueOf(java.lang.Object);
public static java.lang.String valueOf(long);
public boolean contentEquals(java.lang.StringBuffer);
public boolean endsWith(java.lang.String);
public boolean equalsIgnoreCase(java.lang.String);
public boolean equals(java.lang.Object);
public boolean matches(java.lang.String);
public boolean regionMatches(boolean,int,java.lang.String,int,int);
public boolean regionMatches(int,java.lang.String,int,int);
public boolean startsWith(java.lang.String);
public boolean startsWith(java.lang.String,int);
public byte[] getBytes();
public byte[] getBytes(java.lang.String);
public char charAt(int);
public char[] toCharArray();
public int compareToIgnoreCase(java.lang.String);
public int compareTo(java.lang.Object);
public int compareTo(java.lang.String);
public int hashCode();
public int indexOf(int);
public int indexOf(int,int);
public int indexOf(java.lang.String);
public int indexOf(java.lang.String,int);
public int lastIndexOf(int);
public int lastIndexOf(int,int);
public int lastIndexOf(java.lang.String);
public int lastIndexOf(java.lang.String,int);
public int length();
public java.lang.CharSequence subSequence(int,int);
public java.lang.String concat(java.lang.String);
public java.lang.String replaceAll(java.lang.String,java.lang.String);
public java.lang.String replace(char,char);
public java.lang.String replaceFirst(java.lang.String,java.lang.String);
public java.lang.String[] split(java.lang.String);
public java.lang.String[] split(java.lang.String,int);
public java.lang.String substring(int);
public java.lang.String substring(int,int);
public java.lang.String toLowerCase();
public java.lang.String toLowerCase(java.util.Locale);
public java.lang.String toString();
public java.lang.String toUpperCase();
public java.lang.String toUpperCase(java.util.Locale);
public java.lang.String trim();
}

# Remove - StringBuffer method calls. Remove all invocations of StringBuffer
# methods without side effects whose return values are not used.
-assumenosideeffects public class java.lang.StringBuffer {
public java.lang.String toString();
public char charAt(int);
public int capacity();
public int codePointAt(int);
public int codePointBefore(int);
public int indexOf(java.lang.String,int);
public int lastIndexOf(java.lang.String);
public int lastIndexOf(java.lang.String,int);
public int length();
public java.lang.String substring(int);
public java.lang.String substring(int,int);
}

# Remove - StringBuilder method calls. Remove all invocations of StringBuilder
# methods without side effects whose return values are not used.
-assumenosideeffects public class java.lang.StringBuilder {
public java.lang.String toString();
public char charAt(int);
public int capacity();
public int codePointAt(int);
public int codePointBefore(int);
public int indexOf(java.lang.String,int);
public int lastIndexOf(java.lang.String);
public int lastIndexOf(java.lang.String,int);
public int length();
public java.lang.String substring(int);
public java.lang.String substring(int,int);
}