Forum: .NET Reverse Engineering
08-27-2009, 01:45 AM
|
|
Replies: 6
Views: 18,743
|
|
Forum: .NET Reverse Engineering
04-12-2009, 02:25 PM
|
|
Replies: 0
Views: 12,024
Tutorial on unpacking .Net Reactor
Hi all,
i made new tutorial on unpacking .net reactor 3.9.8.0. I would like to introduce my new method to unpack it. Hope you'll like...
|
|
Forum: .NET Reverse Engineering
04-09-2009, 05:08 AM
|
|
Replies: 3
Views: 15,509
.Net Id
When I reversed a .net assembly which is packed and obfuscated, I always confuse myself to define which of packer is being used to protect that assembly. So I would like to have a tool like PEiD to...
|
|
Forum: .NET Reverse Engineering
04-07-2009, 10:18 AM
|
|
Replies: 29
Views: 67,624
Homepage :...
Homepage : http://rongchaua.net/tools-mainmenu-36/85-desmart-deobfuscator-for-smartassembly
Version : 1.0.0.9
[1.0.0.9] : Bugfix in fixing branch and handling exception.
Regards.
rca.
|
|
Forum: .NET Reverse Engineering
04-07-2009, 04:42 AM
|
|
Replies: 0
Views: 11,129
Need .Net Application to improve my tools
Dear all,
due to the rapid changes of protector for .net, I would like to improve all of my tools and unpack methods for .net which is posted at my site http://rongchaua.net. So I am searching for...
|
|
Forum: .NET Reverse Engineering
03-14-2009, 04:48 AM
|
|
Replies: 29
Views: 67,624
What do you mean "This program breaks...
What do you mean "This program breaks it"? You mean the file after deobfuscating does not run anymore. Then it's right. Because the file was changed but I did not resign the assembly. Check with new...
|
|
Forum: .NET Reverse Engineering
03-12-2009, 07:43 PM
|
|
Replies: 5
Views: 15,230
GAC Verifier
I wrote a small tool called GAC Verifier to dectect this art of rootkit.
http://rongchaua.net/tools-mainmenu-36/129-gac-verifier
It will scan the GAC Folder and tell us which assembly was not...
|
|
Forum: .NET Reverse Engineering
03-12-2009, 06:46 AM
|
|
Replies: 5
Views: 15,230
|
|
Forum: .NET Reverse Engineering
03-12-2009, 04:10 AM
|
|
Replies: 5
Views: 15,230
.NET Framework Rootkits
An interesting paper in .Net Reverse
.NET Framework Rootkits:
Backdoors inside your
Framework
November, 2008
Erez Metula
Link...
|
|
Forum: .NET Reverse Engineering
03-11-2009, 11:35 AM
|
|
Replies: 4
Views: 14,294
@ericb1:
As I answer you above. That can be. A...
@ericb1:
As I answer you above. That can be. A hacker can reverse your encrypted password.
I do not know what kind of tblUser you are discussing. It is your custom table which is served only for...
|
|
Forum: .NET Reverse Engineering
03-11-2009, 10:21 AM
|
|
Replies: 4
Views: 14,294
Yes it's according to how you encrypted the...
Yes it's according to how you encrypted the password and how secure the password is.
For example, I use a "standard" password with big,small,number, special character in length of 12 characters. I...
|
|
Forum: .NET Reverse Engineering
03-11-2009, 10:01 AM
|
|
Replies: 2
Views: 12,247
Thanx for your tut Kurapica.
A small question...
Thanx for your tut Kurapica.
A small question about mCore .NET SMS. Why don't you patch at IsLicensed Property? Instead of Return ag. You can patch it to Return true. I think that way will work too.
|
|
Forum: .NET Reverse Engineering
03-10-2009, 08:03 AM
|
|
Replies: 29
Views: 67,624
Yes, these problems can occur because I do not...
Yes, these problems can occur because I do not have many samples to test.
That makes me sad. :(. It is always better with an example. You know, it is just my hobby to write these tools. I have no...
|
|
Forum: .NET Reverse Engineering
02-28-2009, 06:28 PM
|
|
Replies: 4
Views: 15,674
|
|
Forum: .NET Reverse Engineering
02-28-2009, 12:58 PM
|
|
Replies: 4
Views: 15,674
|
|
Forum: .NET Reverse Engineering
02-28-2009, 12:16 PM
|
|
Replies: 29
Views: 67,624
|
|
Forum: .NET Reverse Engineering
02-22-2009, 07:09 AM
|
|
Replies: 29
Views: 67,624
Hi high6,
thank for your help. But the problem...
Hi high6,
thank for your help. But the problem don't lie at the flow control because I fixed the flow control before decrypting strings.
It lies at the decrypt function because this function does...
|
|
Forum: .NET Reverse Engineering
02-18-2009, 07:35 AM
|
|
Replies: 29
Views: 67,624
Version 1.0.0.6 ist out
- Support SA 3.2
- I...
Version 1.0.0.6 ist out
- Support SA 3.2
- I don't know if it work with version < 3.2. It is nice if someone can share me an assembly which be protected by SA 2.x
- I have tested with this file...
|
|
Forum: .NET Reverse Engineering
02-18-2009, 01:29 AM
|
|
Replies: 3
Views: 17,170
|
|
Forum: .NET Reverse Engineering
02-17-2009, 07:28 PM
|
|
Replies: 2
Views: 13,457
|
|
Forum: .NET Reverse Engineering
02-16-2009, 03:04 PM
|
|
Replies: 4
Views: 26,179
@Slashmolder:
1. I have removed strong name in...
@Slashmolder:
1. I have removed strong name in your file to make it work with my DeSmart.
2. I have deobfuscate your files http://www.megaupload.com/de/?d=NQG76P1R . However the string is still...
|
|
Forum: .NET Reverse Engineering
02-16-2009, 01:10 PM
|
|
Replies: 2
Views: 13,457
DePhe - Deobfuscator for Phoenix Protector
"The Phoenix Protector was created to protect .NET assemblies and it's the ideal solution for every .NET developer, due to its support of every kind of project and compatibility with every version of...
|
|
Forum: .NET Reverse Engineering
12-14-2008, 09:36 AM
|
|
Replies: 4
Views: 15,674
DeployLX CodeVeil 3.x
Hi all,
I have just packed my sample crackme with CodeVeil 3.x and would like to post it here so that you can try to unpack it.
Link: http://www.mediafire.com/?ovo41bdzmz3
I checked all options but...
|
|
Forum: .NET Reverse Engineering
12-13-2008, 12:01 PM
|
|
Replies: 17
Views: 29,355
|
|
Forum: .NET Reverse Engineering
12-11-2008, 09:22 AM
|
|
Replies: 17
Views: 29,355
Xenocode Postbuild 2008
Hi all,
it is a long time I did not play with .Net protection. Today I see that Xenocode has already a new version 2008. My friend hat helped me to protect my sample crackme so that I can test new...
|
