Reverse Engineering RET Homepage RET Members Reverse Engineering Projects Reverse Engineering Papers Reversing Challenges Reverser Tools RET Re-Search Engine Reverse Engineering Forum Reverse Engineering Links

Go Back   Reverse Engineering Team Board > Search Forums
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Showing results 1 to 25 of 30
Search took 0.02 seconds.
Search: Posts Made By: tankaiha
Forum: .NET Reverse Engineering 04-10-2009, 08:21 AM
Replies: 3
Views: 13,857
Posted By tankaiha
cool, I want this for long time! two...

cool, I want this for long time!
two advice:
1.support drag and drop
2.support detection of more proections(IntelliLock,Goliath,Themida,etc)
Forum: .NET Reverse Engineering 08-25-2008, 09:16 AM
Replies: 2
Views: 11,932
Posted By tankaiha
WinDbg:most powerful, especially for .net kernel...

WinDbg:most powerful, especially for .net kernel debugging
PeBrowseDbg:not bad for .net app,if no anti profiling.
OllyDbg: not convinent for high level debugging, cool for low level debugging
Forum: .NET Reverse Engineering 05-21-2008, 12:29 AM
Replies: 12
Views: 23,324
Posted By tankaiha
cool staff! two advice: 1) emit all IL to...

cool staff!
two advice:
1) emit all IL to Rebel.Net file format. So we can use Rebel.Net to rebuild assembly.(see NTCore.com)
2) i don't check, but does it has some anti-anti-profiler...
Forum: .NET Reverse Engineering 05-03-2008, 09:31 AM
Replies: 40
Views: 58,196
Posted By tankaiha
jit-hook unpack is a general approach, not...

jit-hook unpack is a general approach, not paticularly aim at .Net Reactor.:)

@:bigmouse
thanks for the tip about CreateInstance:)
Forum: .NET Reverse Engineering 05-03-2008, 08:21 AM
Replies: 40
Views: 58,196
Posted By tankaiha
i get an half finished solution, by jit hook. i...

i get an half finished solution, by jit hook.
i use reflection+invoke, then catch the msil from jit. but i can only get all methods except .ctor and .cctor.
when invoke constructors and static...
Forum: .NET Reverse Engineering 05-03-2008, 07:04 AM
Replies: 40
Views: 58,196
Posted By tankaiha
great job! an advice, add log message function,...

great job!

an advice, add log message function, so we know what's going on when the unpacker does not response.:)
Forum: .NET Reverse Engineering 04-30-2008, 11:54 AM
Replies: 86
Views: 131,266
Posted By tankaiha
my friend crack it soon after 3.7.1.0 released,...

my friend crack it soon after 3.7.1.0 released, but i don't know the details yet :P
Forum: .NET Reverse Engineering 04-27-2008, 02:33 AM
Replies: 7
Views: 20,226
Posted By tankaiha
you right. Re-Max works OK now:)

you right. Re-Max works OK now:)
Forum: .NET Reverse Engineering 04-25-2008, 11:53 PM
Replies: 7
Views: 20,226
Posted By tankaiha
very great job:)

very great job:)
Forum: .NET Reverse Engineering 04-25-2008, 12:55 AM
Replies: 32
Views: 52,508
Posted By tankaiha
@rongchaua: i don't have time to write tut, so i...

@rongchaua: i don't have time to write tut, so i just make a video tut in minutes, hope it's helpful

@Liby: thank's for such good crackme. btw, do you still remember the preface about the book? do...
Forum: .NET Reverse Engineering 04-21-2008, 12:13 AM
Replies: 3
Views: 16,552
Posted By tankaiha
great work! test OK on lastest version {sa}:D

great work!

test OK on lastest version {sa}:D
Forum: .NET Reverse Engineering 04-21-2008, 12:10 AM
Replies: 32
Views: 52,508
Posted By tankaiha
this simple explanation is great! i know more...

this simple explanation is great! i know more about jit hook.

for this crackme, we don't need such low level hook, using windbg is OK.

of coz, Liby will update it soon, implement more protections,...
Forum: .NET Reverse Engineering 04-20-2008, 12:38 PM
Replies: 32
Views: 52,508
Posted By tankaiha
don't know if this is the original msil hope Liby...

don't know if this is the original msil
hope Liby can show us the original C# code

IL_0000: nop
IL_0001: ldstr "B455C37C42F8B0590B43025D5AD7D1A450F9FEFB8B80BE1FEA1DB54D90D05C41"
IL_0006:...
Forum: .NET Reverse Engineering 03-24-2008, 07:12 AM
Replies: 467
Views: 347,441
Posted By tankaiha
maybe profiler is not so useful for JIT Hook.

maybe profiler is not so useful for JIT Hook.
Forum: .NET Reverse Engineering 02-22-2008, 08:53 AM
Replies: 467
Views: 347,441
Posted By tankaiha
the best name deobfuscator for .net thx :)

the best name deobfuscator for .net
thx
:)
Forum: Reverse Code Engineering 01-25-2008, 09:17 AM
Replies: 3
Views: 9,020
Posted By tankaiha
great IDEA :)

great IDEA :)
Forum: Reverse Code Engineering 01-24-2008, 06:38 AM
Replies: 43
Views: 38,669
Posted By tankaiha
I guess it's not a big work to modify RE-max to...

I guess it's not a big work to modify RE-max to support CLISecure.
Any interest bigmouse?:)
Forum: .NET Reverse Engineering 01-23-2008, 11:23 AM
Replies: 467
Views: 347,441
Posted By tankaiha
Good work. Test on my machine, sometimes OK,...

Good work.
Test on my machine, sometimes OK, sometimes error. The error one is still dotnet_Reactor dumped-reassembled file. Problem seems to be the last step, saving file.
Forum: .NET Reverse Engineering 01-22-2008, 11:25 AM
Replies: 467
Views: 347,441
Posted By tankaiha
Since UFO get no problem, so it's my system's...

Since UFO get no problem, so it's my system's problem.
My system is a mass now, always throw strange exceptions under .net.

BTW, the dump file is .Net Reactor 3.6.0.0, control flow deobfuscated, but...
Forum: .NET Reverse Engineering 01-22-2008, 07:12 AM
Replies: 467
Views: 347,441
Posted By tankaiha
test on .Net Reactor dumped file. see the...

test on .Net Reactor dumped file.
see the screenshot.
Forum: Reverse Code Engineering 01-16-2008, 11:09 AM
Replies: 43
Views: 38,669
Posted By tankaiha
hi bigmouse, first, i dont have any sample...

hi bigmouse, first, i dont have any sample because i don't buy Maxtocode. :( sorry

then, i'v pm you, can you see my message?
Forum: Reverse Code Engineering 01-15-2008, 10:36 AM
Replies: 43
Views: 38,669
Posted By tankaiha
no download link??

no download link??
Forum: .NET Reverse Engineering 11-20-2007, 11:28 AM
Replies: 467
Views: 347,441
Posted By tankaiha
so quiet again :( guys, so many stuff is waiting...

so quiet again :(

guys, so many stuff is waiting for us.

SLPS
VM: Xenocode VisualStudio etc.
Forum: Reverse Code Engineering 10-17-2007, 09:24 AM
Replies: 7
Views: 9,744
Posted By tankaiha
not open source now for 2 reasons: 1) still beta...

not open source now for 2 reasons:
1) still beta version. i want to add lot's more functions to it. and want to make it more stable.

2) i'm not a professional programmer, my code is... :p
Forum: Reverse Code Engineering 10-15-2007, 06:49 AM
Replies: 7
Views: 9,744
Posted By tankaiha
for{sa},you should first ildasm then ilasm...

for{sa},you should first ildasm then ilasm it, becoz {sa} has too much error metadata.
also useful for .net reactor dumped exe.
Showing results 1 to 25 of 30

 
Forum Jump




Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2021, Jelsoft Enterprises Ltd.