EXETOOLS FORUM  

Go Back   EXETOOLS FORUM > General > Community Tools

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 12-22-2011, 03:44
mdj's Avatar
mdj mdj is offline
♀♥♂KAMDEV♂♥♀
 
Join Date: Nov 2011
Posts: 147
Rept. Given: 122
Rept. Rcvd 140 Times in 50 Posts
Thanks Given: 38
Thanks Rcvd at 14 Times in 7 Posts
mdj Reputation: 100-199 mdj Reputation: 100-199
Lightbulb de4dot - Deobfuscator for .NET

This is a .NET deobfuscator by 0xd4d

https://bitbucket.org/0xd4d/de4dot
https://bitbucket.org/0xd4d/de4dot/downloads

It currently supports the following .NET obfuscators:

Babel.NET
CliSecure
CodeVeil
Crypto Obfuscator
DeepSea
Dotfuscator
Goliath.NET
.NET Reactor
Eazfuscator.NET
MaxtoCode
Skater.NET
SmartAssembly
Spices.Net
Xenocode


It has partial support for other obfuscators, but the result might not be runnable.

Depending on obfuscator, it will do one or more of the following:

Rename obfuscated symbols
Deobfuscate control flow
Decrypt strings
Decrypt and dump embedded assemblies
Decrypt resources
Decrypt methods
Fix proxy calls
Inline methods
Remove error reporting code (added exception handlers)
Restore field and method arg types
Get rid of added obfuscator classes and methods

Last edited by ZeNiX; 12-20-2012 at 16:33. Reason: Requested by 0xd4d
Reply With Quote
  #2  
Old 12-22-2011, 04:29
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 583
Rept. Given: 321
Rept. Rcvd 211 Times in 105 Posts
Thanks Given: 61
Thanks Rcvd at 67 Times in 30 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
why mediafire?

its open source, with full sources, take from the original point:

https://github.com/0xd4d/de4dot/downloads
Reply With Quote
The Following User Gave Reputation+1 to sendersu For This Useful Post:
chessgod101 (12-22-2011)
  #3  
Old 12-22-2011, 12:20
mdj's Avatar
mdj mdj is offline
♀♥♂KAMDEV♂♥♀
 
Join Date: Nov 2011
Posts: 147
Rept. Given: 122
Rept. Rcvd 140 Times in 50 Posts
Thanks Given: 38
Thanks Rcvd at 14 Times in 7 Posts
mdj Reputation: 100-199 mdj Reputation: 100-199
many time i see appropriate version not on site offline (many person use free server if server refuse then we cannot catch it so mirror is ok it's my opinion )
Best Regards
mdj
Reply With Quote
  #4  
Old 12-22-2011, 12:52
Av0id Av0id is offline
VIP
 
Join Date: Jan 2006
Posts: 399
Rept. Given: 112
Rept. Rcvd 111 Times in 69 Posts
Thanks Given: 0
Thanks Rcvd at 3 Times in 3 Posts
Av0id Reputation: 100-199 Av0id Reputation: 100-199
to download actual sources from debian/ubuntu:
Code:
sudo apt-get install git-core && cd ~ && mkdir de4dot-src && git clone git://github.com/0xd4d/de4dot.git de4dot-src
Reply With Quote
  #5  
Old 12-22-2011, 23:43
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 583
Rept. Given: 321
Rept. Rcvd 211 Times in 105 Posts
Thanks Given: 61
Thanks Rcvd at 67 Times in 30 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
yeah, you are right, but take into account that github.com is not a personal server
it hosts thousands of projects all over the world (actually I guess it is a server farm, not a single server......)
Reply With Quote
  #6  
Old 12-25-2011, 06:04
beBoss beBoss is offline
Friend
 
Join Date: May 2010
Location: In the clouds.
Posts: 51
Rept. Given: 40
Rept. Rcvd 11 Times in 8 Posts
Thanks Given: 1
Thanks Rcvd at 0 Times in 0 Posts
beBoss Reputation: 11
de4dot-1.4.0.zip
Size: 1.0MB
Code:
https://github.com/downloads/0xd4d/de4dot/de4dot-1.4.0.zip
Reply With Quote
The Following 2 Users Gave Reputation+1 to beBoss For This Useful Post:
chessgod101 (12-25-2011), emo (12-25-2011)
  #7  
Old 12-29-2011, 18:41
mdj's Avatar
mdj mdj is offline
♀♥♂KAMDEV♂♥♀
 
Join Date: Nov 2011
Posts: 147
Rept. Given: 122
Rept. Rcvd 140 Times in 50 Posts
Thanks Given: 38
Thanks Rcvd at 14 Times in 7 Posts
mdj Reputation: 100-199 mdj Reputation: 100-199
de4dot-1.4.1
Binaries
de4dot-1.4.1.zip
source code
de4dot
Reply With Quote
The Following User Gave Reputation+1 to mdj For This Useful Post:
blue_devil (01-02-2012)
  #8  
Old 01-31-2012, 01:11
D-Jester's Avatar
D-Jester D-Jester is offline
VIP
 
Join Date: Nov 2003
Location: Ohio, USA
Posts: 269
Rept. Given: 39
Rept. Rcvd 61 Times in 41 Posts
Thanks Given: 0
Thanks Rcvd at 0 Times in 0 Posts
D-Jester Reputation: 61
https://github.com/downloads/0xd4d/de4dot/de4dot-1.5.0.zip
__________________
Even as darkness envelops and consumes us, wrapping around our personal worlds like the hand that grips around our necks and suffocates us, we must realize that life really is beautiful and the shadows of despair will scurry away like the fleeting roaches before the light.
Reply With Quote
The Following 2 Users Gave Reputation+1 to D-Jester For This Useful Post:
|roe (01-31-2012)
  #9  
Old 02-02-2012, 00:54
GI4C4T
 
Posts: n/a
Update ver 1.5.1
Code:
https://github.com/downloads/0xd4d/de4dot/de4dot-1.5.1.zip
Reply With Quote
The Following User Gave Reputation+1 to For This Useful Post:
chessgod101 (02-02-2012)
  #10  
Old 02-02-2012, 03:32
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 583
Rept. Given: 321
Rept. Rcvd 211 Times in 105 Posts
Thanks Given: 61
Thanks Rcvd at 67 Times in 30 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
I did not found any what was fixed page
anyone?
Reply With Quote
  #11  
Old 02-02-2012, 06:41
D-Jester's Avatar
D-Jester D-Jester is offline
VIP
 
Join Date: Nov 2003
Location: Ohio, USA
Posts: 269
Rept. Given: 39
Rept. Rcvd 61 Times in 41 Posts
Thanks Given: 0
Thanks Rcvd at 0 Times in 0 Posts
D-Jester Reputation: 61
https://github.com/0xd4d/de4dot
__________________
Even as darkness envelops and consumes us, wrapping around our personal worlds like the hand that grips around our necks and suffocates us, we must realize that life really is beautiful and the shadows of despair will scurry away like the fleeting roaches before the light.
Reply With Quote
The Following User Gave Reputation+1 to D-Jester For This Useful Post:
sendersu (02-02-2012)
  #12  
Old 02-02-2012, 14:47
Av0id Av0id is offline
VIP
 
Join Date: Jan 2006
Posts: 399
Rept. Given: 112
Rept. Rcvd 111 Times in 69 Posts
Thanks Given: 0
Thanks Rcvd at 3 Times in 3 Posts
Av0id Reputation: 100-199 Av0id Reputation: 100-199
Quote:
Originally Posted by sendersu View Post
I did not found any what was fixed page
anyone?
you can find what was fixed here:
https://github.com/0xd4d/de4dot/commits/master

AFAIK latest SA deobfuscating was fixed
Reply With Quote
The Following 2 Users Gave Reputation+1 to Av0id For This Useful Post:
chessgod101 (02-02-2012), sendersu (02-02-2012)
  #13  
Old 02-16-2012, 04:06
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 583
Rept. Given: 321
Rept. Rcvd 211 Times in 105 Posts
Thanks Given: 61
Thanks Rcvd at 67 Times in 30 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
New version: 1.6.0 !!!
Added CodeVeil support (v3.2 - v5.0)
Added Spices.Net support
Fixed Mono.Cecil crash when methods contained encrypted instructions

where to get? see above link from D-Jester
Reply With Quote
  #14  
Old 02-16-2012, 04:28
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 583
Rept. Given: 321
Rept. Rcvd 211 Times in 105 Posts
Thanks Given: 61
Thanks Rcvd at 67 Times in 30 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
wow, have you ever seen this super detection feature of de4dot?
its amazing:

de4dot.exe x.dll

de4dot v1.6.0.3405 Copyright (C) 2011-2012 de4dot@gmail.com
Latest version and source code: https://github.com/0xd4d/de4dot

More than one obfuscator detected:
.NET Reactor (use: -p dr4)
Eazfuscator.NET 2.9 (use: -p ef)
Detected Eazfuscator.NET 2.9 (x.dll)
Cleaning x.dll
Renaming all obfuscated symbols
Saving x.dll
Reply With Quote
  #15  
Old 03-09-2012, 03:46
JeRRy's Avatar
JeRRy JeRRy is online now
VIP
 
Join Date: Oct 2010
Posts: 119
Rept. Given: 88
Rept. Rcvd 204 Times in 72 Posts
Thanks Given: 12
Thanks Rcvd at 12 Times in 3 Posts
JeRRy Reputation: 200-299 JeRRy Reputation: 200-299 JeRRy Reputation: 200-299
Quote:
New version: 1.7.0

* MaxtoCode is now supported
* Full Eazfuscator.NET support (static decryption of strings, assemblies, resources)
* Added CF 2.0 and 3.5 assembly search paths
Quote:
New version: 1.7.1

* Added support for latest Eazfuscator.NET (3.3)
* MaxtoCode name regex was updated
* Fixed two renamer bugs
DL: de4dot-1.7.1
https://github.com/downloads/0xd4d/d...4dot-1.7.1.zip
__________________
SnD
Reply With Quote
The Following 2 Users Gave Reputation+1 to JeRRy For This Useful Post:
chessgod101 (03-09-2012), quygia128 (03-10-2012)
Reply

Tags
de4dot, deobfusacator

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[C#] De4Dot GUI V0K3 Source Code 2 04-17-2015 06:07


All times are GMT +8. The time now is 23:58.


ICP05004977
vBulletin Security provided by vBSecurity v2.2.0 (Lite) - vBulletin Mods & Addons Copyright © 2017 DragonByte Technologies Ltd.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX