Blogs, videos, papers related to obfuscation or reverse engineering
Websites:
Tigress.wtf - C obfuscator, lists the transformations it does to src on the site.
Ligerlabs.org - Tigress C obfuscator companion site, has tutorials and lectures.
Chatrooms:
Sneaker Development Discord server - Probably the best resource on commercial web based anti bots
JS (De)obfuscation Discord server - Lots of noobs but some knowledgeable people willing to answer questions
Companies:
F5 / Shape Security - Widely considered the most difficult web based antibot to reverse engineer, “ShapeSecurity’s VM is always pushing the boundaries of the kind of fuckery that you can do in Javascript” - Erik Dominguez/Botting.rocks
Blogs:
BELabs - Great VMProtect 2 analysis
Sveba’s blog - Information on Shape Security’s virtual machine
Botting.rocks - Lots of information on Shape Security’s virtual machine, author is extremely good at reversing antibots in general
Umasi.dev/Nullpt.rs - Information on nike.com’s antibot
Solving a VM crackme - Intro to VM based obfuscation, is using executables not JS
Synthesis.to - Tim Blazytko’s blog on reverse engineering
Videos:
Next Generation Virtualization-Based Obfuscators - Another good introduction to VM based obfuscation, by Tim Blazytko