EXETOOLS FORUM  

Go Back   EXETOOLS FORUM > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 06-08-2010, 04:19
mafcin mafcin is offline
Junior Member
 
Join Date: May 2010
Posts: 23
Thanks: 5
Thanked 0 Times in 0 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
mafcin is an unknown quantity at this point
Question Answered: best obfuscator for .net software

simple question - which obfuscator is the best to protect .net software?

i tried a lot of them and finally i didnt found a good one....

i know that .net software cant be protected in 100% but i want to know which one is the hardest to crack...

regards
Reply With Quote
Best Answer - Posted by Kurapica
use SmartAssembly ver 4.0 or above.

salamander is crap.
  #2  
Old 06-08-2010, 14:32
DARKER DARKER is offline
VIP
 
Join Date: Jul 2004
Location: EU
Posts: 168
Thanks: 21
Thanked 71 Times in 26 Posts
Groans: 1
Groaned at 0 Times in 0 Posts
Reputation: 0
DARKER is an unknown quantity at this point
Provided Answers: 2
Nice feature has Salamander .NET protector:
"... it converts the decompilable Microsoft Intermediate Language code (MSIL or CIL) of your assemblies into native format ...."

We investigate some target but i can't say it's really secure ... (Maybe wrong implementation)
Code:
http://www.remotesoft.com/salamander/protector.html
Reply With Quote
The Following User Says Thank You to DARKER For This Useful Post:
mafcin (06-09-2010)
  #3  
Old 06-09-2010, 21:08
mafcin mafcin is offline
Junior Member
 
Join Date: May 2010
Posts: 23
Thanks: 5
Thanked 0 Times in 0 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
mafcin is an unknown quantity at this point
hmm...
i'll try it

i've been using eziriz that represents absolutely no protection... and now i use 9rays obfuscator... i'm going to compare it with salamander...
Reply With Quote
  #4  
Old 06-10-2010, 04:06
Kurapica's Avatar
Kurapica Kurapica is offline
Blacklist Hunter
 
Join Date: Jun 2009
Location: Archives
Posts: 50
Thanks: 3
Thanked 82 Times in 19 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
Kurapica is an unknown quantity at this point
Provided Answers: 2
use SmartAssembly ver 4.0 or above.

salamander is crap.
Reply With Quote
The Following User Says Thank You to Kurapica For This Useful Post:
mafcin (06-11-2010)
  #5  
Old 06-11-2010, 05:31
mafcin mafcin is offline
Junior Member
 
Join Date: May 2010
Posts: 23
Thanks: 5
Thanked 0 Times in 0 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
mafcin is an unknown quantity at this point
Quote:
Originally Posted by Kurapica View Post
use SmartAssembly ver 4.0 or above.

salamander is crap.
i found SmartAssembly yesterday and i was pleasantly surprised when i tried to do anything with protected file... obfuscated code is invisible and for now i dont know how to deobfuscate it, but still trying

i dont know whether you know, but a new version has been released two days ago - i didnt use it yet but i want to know what's new, so probably i'll check it tommorow
Reply With Quote
  #6  
Old 06-14-2010, 22:58
dedificator dedificator is offline
Senior Member
 
Join Date: Oct 2002
Posts: 89
Thanks: 4
Thanked 17 Times in 7 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
dedificator is an unknown quantity at this point
Provided Answers: 4
[QUOTE=mafcin;68428]i found SmartAssembly yesterday and i was pleasantly surprised when i tried to do anything with protected file... obfuscated code is invisible and for now i dont know how to deobfuscate it, but still trying

First of all, remove second <Modules> table entry (usually empty), if one is present... (open file with CFF explorer).
Reply With Quote
  #7  
Old 06-15-2010, 02:18
tonyweb tonyweb is offline
Junior Member
 
Join Date: Jan 2009
Posts: 41
Thanks: 63
Thanked 63 Times in 17 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
tonyweb is an unknown quantity at this point
Provided Answers: 2
I fully quote Kurapica ... Salamander (at least version 3.5 I saw) seems to be a bluff :P

Regards,
Tony
Reply With Quote
  #8  
Old 06-29-2010, 23:30
congviet congviet is offline
Senior Member
 
Join Date: Jun 2010
Location: Vi
Posts: 76
Thanks: 18
Thanked 50 Times in 29 Posts
Groans: 0
Groaned at 1 Time in 1 Post
Reputation: 1
congviet is an unknown quantity at this point
Provided Answers: 3
it depends on the level of cracker, with a good cracker can bypass protect.
Reply With Quote
  #9  
Old 06-30-2010, 08:51
congviet congviet is offline
Senior Member
 
Join Date: Jun 2010
Location: Vi
Posts: 76
Thanks: 18
Thanked 50 Times in 29 Posts
Groans: 0
Groaned at 1 Time in 1 Post
Reputation: 1
congviet is an unknown quantity at this point
Provided Answers: 3
Codewall 2010 v4.0 also a tool to protect .NET applications is very good.
Quote:
http://www.codewall.net/default.aspx
Reply With Quote
  #10  
Old 06-30-2010, 17:56
Kurapica's Avatar
Kurapica Kurapica is offline
Blacklist Hunter
 
Join Date: Jun 2009
Location: Archives
Posts: 50
Thanks: 3
Thanked 82 Times in 19 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
Kurapica is an unknown quantity at this point
Provided Answers: 2
cheap tricks !

it takes us back to 2004 or even before :S

this is just my humble opinion.
Reply With Quote
  #11  
Old 07-08-2010, 23:55
bball0002 bball0002 is offline
Junior Member
 
Join Date: Sep 2009
Posts: 25
Thanks: 3
Thanked 5 Times in 3 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
bball0002 is an unknown quantity at this point
Quote:
Originally Posted by congviet View Post
Codewall 2010 v4.0 also a tool to protect .NET applications is very good.
Are you a Codewall developer? Protection is worse than Reactor or Salamander. I cracked all versions of this protector, including 4.0.


On-Topic, just go with a good obfuscator like {SmartAssembly}. Most of the JIT hooking protectors don't have very good obfuscation, so once you get the IL code back it's not a hard process to crack the exe.
Reply With Quote
  #12  
Old 07-24-2010, 03:44
mafcin mafcin is offline
Junior Member
 
Join Date: May 2010
Posts: 23
Thanks: 5
Thanked 0 Times in 0 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
mafcin is an unknown quantity at this point
what do u think about that software: http://lukesw.net/apps/ProtectorLite.aspx
it's a little obfuscator made by polish student... it's not very popular and it's free for all
Reply With Quote
  #13  
Old 07-26-2010, 12:28
WhoCares's Avatar
WhoCares WhoCares is offline
who cares
 
Join Date: Jan 2002
Location: Here
Posts: 317
Thanks: 1
Thanked 6 Times in 6 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
WhoCares is an unknown quantity at this point
Provided Answers: 3
http://www.dnguard.net/
__________________
AKA Solomon/blowfish.
Reply With Quote
  #14  
Old 08-06-2010, 05:38
mafcin mafcin is offline
Junior Member
 
Join Date: May 2010
Posts: 23
Thanks: 5
Thanked 0 Times in 0 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
mafcin is an unknown quantity at this point
Quote:
Originally Posted by WhoCares View Post
http://www.dnguard.net/
this is infected by a virus - dont try to install this - scanned by latest versions of ESET NOD32 and Kaspersky Internet Security 2011
Reply With Quote
  #15  
Old 08-07-2010, 00:29
bball0002 bball0002 is offline
Junior Member
 
Join Date: Sep 2009
Posts: 25
Thanks: 3
Thanked 5 Times in 3 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
bball0002 is an unknown quantity at this point
lol... no it's not. I've used that software before. It's clean. Maybe VmProtect causes the false-positive?
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Manco .NET Obfuscator v3.0.0.0 ollydbg Software Release 1 05-22-2011 00:54
Goliath .Net Obfuscator LaBBa General Discussion 0 08-19-2008 22:45
Sc Obfuscator, Little obfuscator scherzo Software Release 2 03-16-2007 01:56
VFP obfuscator Leonid Software Release 0 02-06-2007 19:59
.NET obfuscator butter General Discussion 4 08-11-2004 17:08


All times are GMT +8. The time now is 10:36.


ICP05004977
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX