Exetools

Exetools (https://forum.exetools.com/index.php)
-   Community Tools (https://forum.exetools.com/forumdisplay.php?f=47)
-   -   de4dot - Deobfuscator for .NET (https://forum.exetools.com/showthread.php?t=13951)

mdj 12-22-2011 03:44

de4dot - Deobfuscator for .NET
 
This is a .NET deobfuscator by 0xd4d

https://bitbucket.org/0xd4d/de4dot
https://bitbucket.org/0xd4d/de4dot/downloads

It currently supports the following .NET obfuscators:

Babel.NET
CliSecure
CodeVeil
Crypto Obfuscator
DeepSea
Dotfuscator
Goliath.NET
.NET Reactor
Eazfuscator.NET
MaxtoCode
Skater.NET
SmartAssembly
Spices.Net
Xenocode


It has partial support for other obfuscators, but the result might not be runnable.

Depending on obfuscator, it will do one or more of the following:

Rename obfuscated symbols
Deobfuscate control flow
Decrypt strings
Decrypt and dump embedded assemblies
Decrypt resources
Decrypt methods
Fix proxy calls
Inline methods
Remove error reporting code (added exception handlers)
Restore field and method arg types
Get rid of added obfuscator classes and methods

sendersu 12-22-2011 04:29

why mediafire?

its open source, with full sources, take from the original point:

https://github.com/0xd4d/de4dot/downloads

mdj 12-22-2011 12:20

many time i see appropriate version not on site offline (many person use free server if server refuse then we cannot catch it so mirror is ok it's my opinion )
Best Regards
mdj

Av0id 12-22-2011 12:52

to download actual sources from debian/ubuntu:
Code:

sudo apt-get install git-core && cd ~ && mkdir de4dot-src && git clone git://github.com/0xd4d/de4dot.git de4dot-src

sendersu 12-22-2011 23:43

yeah, you are right, but take into account that github.com is not a personal server
it hosts thousands of projects all over the world (actually I guess it is a server farm, not a single server......)

beBoss 12-25-2011 06:04

de4dot-1.4.0.zip
Size: 1.0MB
Code:

https://github.com/downloads/0xd4d/de4dot/de4dot-1.4.0.zip

mdj 12-29-2011 18:41

de4dot-1.4.1
Binaries
de4dot-1.4.1.zip
source code
de4dot

D-Jester 01-31-2012 01:11

https://github.com/downloads/0xd4d/de4dot/de4dot-1.5.0.zip

GI4C4T 02-02-2012 00:54

Update ver 1.5.1
Code:

https://github.com/downloads/0xd4d/de4dot/de4dot-1.5.1.zip

sendersu 02-02-2012 03:32

I did not found any what was fixed page
anyone?

D-Jester 02-02-2012 06:41

https://github.com/0xd4d/de4dot

Av0id 02-02-2012 14:47

Quote:

Originally Posted by sendersu (Post 77308)
I did not found any what was fixed page
anyone?

you can find what was fixed here:
https://github.com/0xd4d/de4dot/commits/master

AFAIK latest SA deobfuscating was fixed

sendersu 02-16-2012 04:06

New version: 1.6.0 !!!
Added CodeVeil support (v3.2 - v5.0)
Added Spices.Net support
Fixed Mono.Cecil crash when methods contained encrypted instructions

where to get? see above link from D-Jester

sendersu 02-16-2012 04:28

wow, have you ever seen this super detection feature of de4dot?
its amazing:

de4dot.exe x.dll

de4dot v1.6.0.3405 Copyright (C) 2011-2012 de4dot@gmail.com
Latest version and source code: https://github.com/0xd4d/de4dot

More than one obfuscator detected:
.NET Reactor (use: -p dr4)
Eazfuscator.NET 2.9 (use: -p ef)
Detected Eazfuscator.NET 2.9 (x.dll)
Cleaning x.dll
Renaming all obfuscated symbols
Saving x.dll

JeRRy 03-09-2012 03:46

Quote:

New version: 1.7.0

* MaxtoCode is now supported
* Full Eazfuscator.NET support (static decryption of strings, assemblies, resources)
* Added CF 2.0 and 3.5 assembly search paths
Quote:

New version: 1.7.1

* Added support for latest Eazfuscator.NET (3.3)
* MaxtoCode name regex was updated
* Fixed two renamer bugs
DL: de4dot-1.7.1
https://github.com/downloads/0xd4d/d...4dot-1.7.1.zip


All times are GMT +8. The time now is 16:35.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX