Protection layers

Every star, working in your favor

Cosmic Obfuscator stacks classic transforms with a VM wrapper so the resulting Lua is opaque without sacrificing portability.

Virtual machine

Wraps your program in a tiny opcode-style VM. The original source becomes a constant table decoded and dispatched at runtime — readable only through the wrapper.

String encryption

Every string literal becomes an XOR-encoded UTF-8 byte array decoded by a small prelude at load time. Per-job key, so two builds never look the same.

Identifier renaming

Local variables and function parameters are renamed to opaque hex symbols (_0xA31F). Global names and table keys are preserved so your APIs keep working.

Constant obfuscation

Numeric and boolean constants can be wrapped in arithmetic decoys, making static analysis tools work harder for every value.

Junk code injection

Inserts decoy locals and dead arithmetic between meaningful operations to break pattern matching and inflate reverse-engineering cost.

Anti-tamper friendly

Output is plain Lua — no native binaries, no special runtime. Drop it straight into your game, exploit, or embedded device.

A note on the VM

The Cosmic VM is a small, honest wrapper — not a one-to-one clone of commercial obfuscators like Luraph. It raises the bar significantly against casual reversing and pattern-based deobfuscators, but determined attackers with time can still get through. Combine it with server-side validation for anything that truly matters.

Try it in the dashboard