Reversing .NET application

[Kurapica]

I'm really intereseted in the .NET platform, and I've been looking for papers on how to revrese these applications, but since we've seen no fat-ass application like photohop or max re-written in .net, I really couldn't find much about this topic.

Although I got a general idea about how .net apps are being protected by obfuscation and strong-name signing but I think that we need more info on this topic !

To reverse .net application you must understand IL assembly just like you need to understand Assembly to crack [old] software written with { C++ , Pascal , VB }

I tried a to crack a couple of proggies earlier and it worked and i really hope to get more info on this...

[Devine9]

.NET is an area which we are beginning to focus on. We have a meeting regarding it in the next 2 weeks. Afterward you should see us start to release on the topic. I myself am very interested in it, up until now its just been time constraints.

-DR

[dyna]

protect:
obfuscator(mostly are very easy to crack, except that some obfuscator use un-printable characters, and can also make Reflector useless)
strong name(can easyily be removed by tool or unassemble-remove-reassemble)
interop(using win32 dll, no .Net)

debug:
we can use: WinDBG or PEBrowse.Net

[Kurapica]

check this debugger !

PEBrowse Professional Interactive

http://www.smidgeonsoft.prohosting.com <_<

[Kurapica]

Hello again ! :P

I've been looking lately for something to bypass the strongname verification

This tool is great to explore the PE32,PE64 files and the .Net contents inside PE files and

you can remove strongName from Assemblies too with it .. .

it really solved many problems for me....

http://pmode.net/CFF.php

[Kurapica]

Obsolete !

Strings Decoder for .net assemblies that use string-encoding to hide strings , with code and everything <_<

Change the attchment file extension to "zip" and extract...

See ya

:blink:

__________________________________________________ __

Sorry but the attachemnt was corrupted and fixed in the next post

[Kurapica]

It looks like the HTML tutor in the previous post regrading String-encoding is corrupted, I'm sorry for that, here you will find the tutorial and the enhanced code in VB.net .... :blink:

just change the attachmenet extension to "rar" and extract !

__________________________________________________ ___

Sorry ; had to remove the attachment to add a new one.

[Kurapica]

Hello again....

An other protection system for .net assemblies here ..

change the extension to "rar" and extract !

comments are welcome.

[LibX]

http://sourceforge.net/projects/dile

Very good .NET debugger u need some time to learn how everything is working but after that u can't live without it

Regards,
LibX

[Kurapica]

It looks like the rar archive that contains all the work I've done
is no longer hosted on that website, so I will upload it to a new
site and post the address here....