Hallucina MCP Server

What is Hallucina?

Hallucina is an LLVM‑17 based obfuscation tool designed to confuse LLM clients that are used with custom MCP servers for disassemblers such as Ghidra and IDA PRO, making human‑driven reverse engineering mandatory.

How to use Hallucina?

Build Hallucina from source using the provided CMake and Ninja instructions, then use the generated clang binary with one or more -mllvm obfuscation flags (e.g., -mllvm -irobf -mllvm --irobf-indbr) to compile source files. For projects, set CC to the built clang and add the flags to CFLAGS.

Key features of Hallucina

• Obfuscation using indirect branches with encrypted jump targets.
• Indirect function calls with encrypted target addresses.
• Indirect global variable references with encrypted addresses.
• C string encryption to hide literal strings.
• Procedure‑related control flow flattening obfuscation.
• Comprehensive flag that applies all obfuscation techniques at once.

Use cases of Hallucina

• Obfuscating binaries to prevent automated reverse engineering by LLM‑based tools.
• Protecting proprietary code from analysis by disassembler‑integrated AI clients.
• Hardening executables against static analysis and tampering.