deobfuscator for .Net
Do you know any good deobfuscator for开发者_C百科 .Net?
The most powerful .NET deobfuscator I know is de4dot - Deobfuscator for .NET. It is open source, actively developed, and it claims to support the following obfuscators:
- Babel.NET
- CliSecure
- CodeVeil
- Crypto Obfuscator
- DeepSea
- Dotfuscator
- .NET Reactor
- Eazfuscator.NET
- Goliath.NET
- MaxtoCode
- Skater.NET
- SmartAssembly
- Spices.NET
- Xenocode
I have tested it myself with several obfuscators, and de4dot has deobfuscated the assemblies without problems.
As Smi answered de4dot is the most powerful.
It has a plugin for Telerik JustDecompiler (free .NET decompiler) and it is very handy plug in.
When you install it
- Go to Plugins
- Then Plugin Manager
- In Available Plugins you will see De4Dot Deobfuscator
- Then Download
As a reaction on this question Skater .NET Obfuscator development team was refining the obfuscator's code protection functionalities. Skater prevents de4dot now and Skater persistently and successfully struggles with deobfuscation. Skater cannot easily be hacked and deobfuscated by the contemporary open source deobfuscators.
Let’s study an executable protected by Skater .NET Obfuscator. .NET deobfuscate means deobfuscating of .net exe files, which were developed by visual studio.
Let’s start from decompiling the .NET file. It is a heavily obfuscated .NET executable and it could be more difficult to crack. The executable is written in .NET so we can decompile it using some of the popular tools made for this purpose (.NET Refractor, JustDecompile, etc).
As we can see, the code is obfuscated: functions have been entangled, variables/classes/methods got meaningless names. Also the spaghetti code inside the obfscted.exe contains a lot of junk instructions and that is difficult to follow. Even applying a known tool for .NET deobfuscation did not helped much.
精彩评论