Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 06-08-2010, 04:19
mafcin
 
Posts: n/a
Question best obfuscator for .net software

simple question - which obfuscator is the best to protect .net software?

i tried a lot of them and finally i didnt found a good one....

i know that .net software cant be protected in 100% but i want to know which one is the hardest to crack...

regards
Reply With Quote
  #2  
Old 06-08-2010, 14:32
DARKER DARKER is offline
VIP
 
Join Date: Jul 2004
Location: Somewhere Over the Rainbow
Posts: 454
Rept. Given: 15
Rept. Rcvd 119 Times in 51 Posts
Thanks Given: 11
Thanks Rcvd at 731 Times in 194 Posts
DARKER Reputation: 100-199 DARKER Reputation: 100-199
Nice feature has Salamander .NET protector:
"... it converts the decompilable Microsoft Intermediate Language code (MSIL or CIL) of your assemblies into native format ...."

We investigate some target but i can't say it's really secure ... (Maybe wrong implementation)
Code:
http://www.remotesoft.com/salamander/protector.html
Reply With Quote
The Following User Gave Reputation+1 to DARKER For This Useful Post:
  #3  
Old 06-09-2010, 21:08
mafcin
 
Posts: n/a
hmm...
i'll try it

i've been using eziriz that represents absolutely no protection... and now i use 9rays obfuscator... i'm going to compare it with salamander...
Reply With Quote
  #4  
Old 06-10-2010, 04:06
Kurapica's Avatar
Kurapica Kurapica is offline
VIP
 
Join Date: Jun 2009
Location: Archives
Posts: 190
Rept. Given: 20
Rept. Rcvd 143 Times in 42 Posts
Thanks Given: 67
Thanks Rcvd at 404 Times in 87 Posts
Kurapica Reputation: 100-199 Kurapica Reputation: 100-199
use SmartAssembly ver 4.0 or above.

salamander is crap.
Reply With Quote
The Following User Gave Reputation+1 to Kurapica For This Useful Post:
  #5  
Old 06-11-2010, 05:31
mafcin
 
Posts: n/a
Quote:
Originally Posted by Kurapica View Post
use SmartAssembly ver 4.0 or above.

salamander is crap.
i found SmartAssembly yesterday and i was pleasantly surprised when i tried to do anything with protected file... obfuscated code is invisible and for now i dont know how to deobfuscate it, but still trying

i dont know whether you know, but a new version has been released two days ago - i didnt use it yet but i want to know what's new, so probably i'll check it tommorow
Reply With Quote
  #6  
Old 06-14-2010, 22:58
dedificator dedificator is offline
Friend
 
Join Date: Oct 2002
Posts: 89
Rept. Given: 4
Rept. Rcvd 16 Times in 6 Posts
Thanks Given: 0
Thanks Rcvd at 4 Times in 4 Posts
dedificator Reputation: 17
[QUOTE=mafcin;68428]i found SmartAssembly yesterday and i was pleasantly surprised when i tried to do anything with protected file... obfuscated code is invisible and for now i dont know how to deobfuscate it, but still trying

First of all, remove second <Modules> table entry (usually empty), if one is present... (open file with CFF explorer).
Reply With Quote
  #7  
Old 06-15-2010, 02:18
tonyweb tonyweb is offline
Family
 
Join Date: Jan 2009
Posts: 190
Rept. Given: 190
Rept. Rcvd 95 Times in 36 Posts
Thanks Given: 1,901
Thanks Rcvd at 299 Times in 122 Posts
tonyweb Reputation: 95
I fully quote Kurapica ... Salamander (at least version 3.5 I saw) seems to be a bluff :P

Regards,
Tony
Reply With Quote
  #8  
Old 06-29-2010, 23:30
congviet congviet is offline
Family
 
Join Date: Jun 2010
Location: Vi
Posts: 151
Rept. Given: 30
Rept. Rcvd 76 Times in 42 Posts
Thanks Given: 56
Thanks Rcvd at 52 Times in 30 Posts
congviet Reputation: 76
it depends on the level of cracker, with a good cracker can bypass protect.
Reply With Quote
  #9  
Old 06-30-2010, 08:51
congviet congviet is offline
Family
 
Join Date: Jun 2010
Location: Vi
Posts: 151
Rept. Given: 30
Rept. Rcvd 76 Times in 42 Posts
Thanks Given: 56
Thanks Rcvd at 52 Times in 30 Posts
congviet Reputation: 76
Codewall 2010 v4.0 also a tool to protect .NET applications is very good.
Quote:
http://www.codewall.net/default.aspx
Reply With Quote
  #10  
Old 06-30-2010, 17:56
Kurapica's Avatar
Kurapica Kurapica is offline
VIP
 
Join Date: Jun 2009
Location: Archives
Posts: 190
Rept. Given: 20
Rept. Rcvd 143 Times in 42 Posts
Thanks Given: 67
Thanks Rcvd at 404 Times in 87 Posts
Kurapica Reputation: 100-199 Kurapica Reputation: 100-199
cheap tricks !

it takes us back to 2004 or even before :S

this is just my humble opinion.
Reply With Quote
  #11  
Old 07-08-2010, 23:55
bball0002 bball0002 is offline
Friend
 
Join Date: Sep 2009
Posts: 28
Rept. Given: 3
Rept. Rcvd 6 Times in 4 Posts
Thanks Given: 1
Thanks Rcvd at 5 Times in 1 Post
bball0002 Reputation: 6
Quote:
Originally Posted by congviet View Post
Codewall 2010 v4.0 also a tool to protect .NET applications is very good.
Are you a Codewall developer? Protection is worse than Reactor or Salamander. I cracked all versions of this protector, including 4.0.


On-Topic, just go with a good obfuscator like {SmartAssembly}. Most of the JIT hooking protectors don't have very good obfuscation, so once you get the IL code back it's not a hard process to crack the exe.
Reply With Quote
  #12  
Old 07-24-2010, 03:44
mafcin
 
Posts: n/a
what do u think about that software: http://lukesw.net/apps/ProtectorLite.aspx
it's a little obfuscator made by polish student... it's not very popular and it's free for all
Reply With Quote
  #13  
Old 07-26-2010, 12:28
WhoCares's Avatar
WhoCares WhoCares is offline
who cares
 
Join Date: Jan 2002
Location: Here
Posts: 409
Rept. Given: 10
Rept. Rcvd 16 Times in 14 Posts
Thanks Given: 41
Thanks Rcvd at 155 Times in 61 Posts
WhoCares Reputation: 17
http://www.dnguard.net/
__________________
AKA Solomon/blowfish.
Reply With Quote
  #14  
Old 08-06-2010, 05:38
mafcin
 
Posts: n/a
Quote:
Originally Posted by WhoCares View Post
http://www.dnguard.net/
this is infected by a virus - dont try to install this - scanned by latest versions of ESET NOD32 and Kaspersky Internet Security 2011
Reply With Quote
  #15  
Old 08-07-2010, 00:29
bball0002 bball0002 is offline
Friend
 
Join Date: Sep 2009
Posts: 28
Rept. Given: 3
Rept. Rcvd 6 Times in 4 Posts
Thanks Given: 1
Thanks Rcvd at 5 Times in 1 Post
bball0002 Reputation: 6
lol... no it's not. I've used that software before. It's clean. Maybe VmProtect causes the false-positive?
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
.NET obfuscator butter General Discussion 4 08-11-2004 17:08


All times are GMT +8. The time now is 12:51.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )