Reverse Engineering RET Homepage RET Members Reverse Engineering Projects Reverse Engineering Papers Reversing Challenges Reverser Tools RET Re-Search Engine Reverse Engineering Forum Reverse Engineering Links

Go Back   Reverse Engineering Team Board > Search Forums
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Showing results 1 to 25 of 91
Search took 0.02 seconds.
Search: Posts Made By: rongchaua
Forum: .NET Reverse Engineering 08-27-2009, 01:45 AM
Replies: 6
Views: 9,953
Posted By rongchaua
@looleeguy: Try my tool to deobfuscate your...

@looleeguy:
Try my tool to deobfuscate your assembly. Feedbacks are welcomed.

http://rongchaua.net/tools-mainmenu-36/124-dereactor-a-deobfuscator-for-net-reactor

Regards.
Forum: .NET Reverse Engineering 04-12-2009, 02:25 PM
Replies: 0
Views: 4,838
Posted By rongchaua
Tutorial on unpacking .Net Reactor

Hi all,
i made new tutorial on unpacking .net reactor 3.9.8.0. I would like to introduce my new method to unpack it. Hope you'll like...
Forum: .NET Reverse Engineering 04-09-2009, 05:08 AM
Replies: 3
Views: 6,341
Posted By rongchaua
.Net Id

When I reversed a .net assembly which is packed and obfuscated, I always confuse myself to define which of packer is being used to protect that assembly. So I would like to have a tool like PEiD to...
Forum: .NET Reverse Engineering 04-07-2009, 10:18 AM
Replies: 29
Views: 49,113
Posted By rongchaua
Homepage :...

Homepage : http://rongchaua.net/tools-mainmenu-36/85-desmart-deobfuscator-for-smartassembly
Version : 1.0.0.9

[1.0.0.9] : Bugfix in fixing branch and handling exception.

Regards.
rca.
Forum: .NET Reverse Engineering 04-07-2009, 04:42 AM
Replies: 0
Views: 3,990
Posted By rongchaua
Need .Net Application to improve my tools

Dear all,
due to the rapid changes of protector for .net, I would like to improve all of my tools and unpack methods for .net which is posted at my site http://rongchaua.net. So I am searching for...
Forum: .NET Reverse Engineering 03-14-2009, 04:48 AM
Replies: 29
Views: 49,113
Posted By rongchaua
What do you mean "This program breaks...

What do you mean "This program breaks it"? You mean the file after deobfuscating does not run anymore. Then it's right. Because the file was changed but I did not resign the assembly. Check with new...
Forum: .NET Reverse Engineering 03-12-2009, 07:43 PM
Replies: 5
Views: 6,070
Posted By rongchaua
GAC Verifier

I wrote a small tool called GAC Verifier to dectect this art of rootkit.

http://rongchaua.net/tools-mainmenu-36/129-gac-verifier

It will scan the GAC Folder and tell us which assembly was not...
Forum: .NET Reverse Engineering 03-12-2009, 06:46 AM
Replies: 5
Views: 6,070
Posted By rongchaua
Hi Kurapica, Test this research if you have time....

Hi Kurapica,
Test this research if you have time. I myself can not believe that it can be bypassed so easily. I will start to test in some next days.

More info about this bug
Forum: .NET Reverse Engineering 03-12-2009, 04:10 AM
Replies: 5
Views: 6,070
Posted By rongchaua
.NET Framework Rootkits

An interesting paper in .Net Reverse

.NET Framework Rootkits:
Backdoors inside your
Framework
November, 2008
Erez Metula

Link...
Forum: .NET Reverse Engineering 03-11-2009, 11:35 AM
Replies: 4
Views: 5,272
Posted By rongchaua
@ericb1: As I answer you above. That can be. A...

@ericb1:

As I answer you above. That can be. A hacker can reverse your encrypted password.
I do not know what kind of tblUser you are discussing. It is your custom table which is served only for...
Forum: .NET Reverse Engineering 03-11-2009, 10:21 AM
Replies: 4
Views: 5,272
Posted By rongchaua
Yes it's according to how you encrypted the...

Yes it's according to how you encrypted the password and how secure the password is.

For example, I use a "standard" password with big,small,number, special character in length of 12 characters. I...
Forum: .NET Reverse Engineering 03-11-2009, 10:01 AM
Replies: 2
Views: 4,840
Posted By rongchaua
Thanx for your tut Kurapica. A small question...

Thanx for your tut Kurapica.
A small question about mCore .NET SMS. Why don't you patch at IsLicensed Property? Instead of Return ag. You can patch it to Return true. I think that way will work too.
Forum: .NET Reverse Engineering 03-10-2009, 08:03 AM
Replies: 29
Views: 49,113
Posted By rongchaua
Yes, these problems can occur because I do not...

Yes, these problems can occur because I do not have many samples to test.


That makes me sad. :(. It is always better with an example. You know, it is just my hobby to write these tools. I have no...
Forum: .NET Reverse Engineering 02-28-2009, 06:28 PM
Replies: 4
Views: 7,821
Posted By rongchaua
I still do not understand how Codeveil protects...

I still do not understand how Codeveil protects the assembly. I still find where he hooks the function and which function he hooks to decrypt IL. :(.
Forum: .NET Reverse Engineering 02-28-2009, 12:58 PM
Replies: 4
Views: 7,821
Posted By rongchaua
Hi all, I uploaded another version of my Sample...

Hi all,
I uploaded another version of my Sample Crackme which packed by CodeVeil 3.x
http://www.mediafire.com/?ovo41bdzmz3

I am trying to unpack CodeVeil 3.x. Hope someone can find way to unpack...
Forum: .NET Reverse Engineering 02-28-2009, 12:16 PM
Replies: 29
Views: 49,113
Posted By rongchaua
Version 1.0.0.7 ist out: [1.0.0.7] : Bugfix in...

Version 1.0.0.7 ist out:
[1.0.0.7] : Bugfix in decrypting string. It works now better.

Regards.
rca.
Forum: .NET Reverse Engineering 02-22-2009, 07:09 AM
Replies: 29
Views: 49,113
Posted By rongchaua
Hi high6, thank for your help. But the problem...

Hi high6,
thank for your help. But the problem don't lie at the flow control because I fixed the flow control before decrypting strings.
It lies at the decrypt function because this function does...
Forum: .NET Reverse Engineering 02-18-2009, 07:35 AM
Replies: 29
Views: 49,113
Posted By rongchaua
Version 1.0.0.6 ist out - Support SA 3.2 - I...

Version 1.0.0.6 ist out
- Support SA 3.2
- I don't know if it work with version < 3.2. It is nice if someone can share me an assembly which be protected by SA 2.x
- I have tested with this file...
Forum: .NET Reverse Engineering 02-18-2009, 01:29 AM
Replies: 3
Views: 8,089
Posted By rongchaua
Try to use this one to deobfuscate your...

Try to use this one to deobfuscate your assembly

http://rongchaua.net/tools-mainmenu-36/106-dedot-a-deobfuscator-for-dotfuscator
Forum: .NET Reverse Engineering 02-17-2009, 07:28 PM
Replies: 2
Views: 5,915
Posted By rongchaua
@UFO-Pu55y: Copy Paste error. I have removed that...

@UFO-Pu55y: Copy Paste error. I have removed that sh*t. :)).


I don't understand what you mean. :(.
Forum: .NET Reverse Engineering 02-16-2009, 03:04 PM
Replies: 4
Views: 17,508
Posted By rongchaua
@Slashmolder: 1. I have removed strong name in...

@Slashmolder:
1. I have removed strong name in your file to make it work with my DeSmart.
2. I have deobfuscate your files http://www.megaupload.com/de/?d=NQG76P1R . However the string is still...
Forum: .NET Reverse Engineering 02-16-2009, 01:10 PM
Replies: 2
Views: 5,915
Posted By rongchaua
DePhe - Deobfuscator for Phoenix Protector

"The Phoenix Protector was created to protect .NET assemblies and it's the ideal solution for every .NET developer, due to its support of every kind of project and compatibility with every version of...
Forum: .NET Reverse Engineering 12-14-2008, 09:36 AM
Replies: 4
Views: 7,821
Posted By rongchaua
DeployLX CodeVeil 3.x

Hi all,
I have just packed my sample crackme with CodeVeil 3.x and would like to post it here so that you can try to unpack it.
Link: http://www.mediafire.com/?ovo41bdzmz3

I checked all options but...
Forum: .NET Reverse Engineering 12-13-2008, 12:01 PM
Replies: 17
Views: 16,749
Posted By rongchaua
@pvlog: 1. Greate solution. 2. I just suggest to...

@pvlog:
1. Greate solution.
2. I just suggest to unpack it. I always use this crackme to test a new version of .net protector. It is very easy to solve my crackme. And I did not remember what is...
Forum: .NET Reverse Engineering 12-11-2008, 09:22 AM
Replies: 17
Views: 16,749
Posted By rongchaua
Xenocode Postbuild 2008

Hi all,
it is a long time I did not play with .Net protection. Today I see that Xenocode has already a new version 2008. My friend hat helped me to protect my sample crackme so that I can test new...
Showing results 1 to 25 of 91

 
Forum Jump




Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.