Exetools

Exetools (https://forum.exetools.com/index.php)
-   Community Tools (https://forum.exetools.com/forumdisplay.php?f=47)
-   -   de4dot - Deobfuscator for .NET (https://forum.exetools.com/showthread.php?t=13951)

0xd4d 01-13-2013 03:47

It's the obfuscator (DeepSea) that added sealed to classes. It will still run it's just that no compiler would allow you to compile it. I'll add a de4dot option to remove sealed from classes in some future version.

BTW, if this was obfuscated with the commercial version, please PM me a link to the installer. The trial version never gets updated, and is always supported by de4dot.

ontryit 03-02-2013 12:51

0xd4d : Can you also make a documentation in a downloadable .chm help file format in your website? How about support deobfuscate the Confuser v1.9? Thank you.

regards
ontryit

wilson bibe 03-02-2013 17:03

You can more information about de4dot deobfuscator in this link:https://bitbucket.org/0xd4d/de4dot/commits
Regards

ontryit 03-04-2013 15:31

Quote:

Originally Posted by wilson bibe (Post 83049)
You can more information about de4dot deobfuscator in this link:https://bitbucket.org/0xd4d/de4dot/commits
Regards

You misunderstand me, i mean why 0xd4d don't also create a manual/help file with the release binary :)

the_beginner 04-28-2013 10:33

Thank you very much for share, it's working great.

kvllz 05-06-2013 13:21

this is a very good tool..

8bytes 05-31-2013 04:33

Thank you very mutch
 
I hope this message finds you well with everything, I really appriciate your work that you have done on de4dot

I have a question when the protection is deteced as Eazfuscator.NET 3.3.149 - 3.4 what is the best way to run the de4dot with that parameters cause when i replace the cleaned dll it does not work.:(

Dreamer 05-31-2013 05:30

can you send me that file on pm i want to try

sendersu 05-31-2013 15:57

Did someone contacted author?
looks like he is very busy.... (sent him already some reports but..)

HooK 09-17-2013 04:38

Hey guys,

Is this project still alive? I was wondering if de4dot v2.0.4 or v.2.1 are in the works.

Several Obfuscators that have recently failed on me with v2.0.3 are:
Desaware QND Obfuscator
Crypto Obfuscator

The Desaware QND Obfuscated file was actually "cleaned" but not runnable. I may have to do some manual work on it...
But I was wondering if anyone already has a re-compiled version of de4dot that could "clean" a newer version of Crypto Obfuscated code.

Thanks!
-HooK

dnvthv 09-17-2013 08:52

Quote:

Originally Posted by 8bytes (Post 84983)
I hope this message finds you well with everything, I really appriciate your work that you have done on de4dot

I have a question when the protection is deteced as Eazfuscator.NET 3.3.149 - 3.4 what is the best way to run the de4dot with that parameters cause when i replace the cleaned dll it does not work.:(

I have checked this. Not working with new version Eazfuscator.NET. I hope de4dot fixes the issues.

claudedb 09-17-2013 09:20

the newest maxtocode is not supported

sendersu 09-17-2013 14:53

it is obvious that de4dot is out of the game,
it is the time to start learning thing by ourselves.

heima911 11-15-2013 11:27

Using NET Internals and Code Injection Test MaxToCode can see most of the code il code, MaxTocode at runtime by vmp encrypted.

0xd4d 11-20-2013 01:56

New version: 3.0.2

https://bitbucket.org/0xd4d/de4dot
  • Updated Agile.NET support
  • Updated CryptoObfuscator support
  • Updated Dotfuscator support
  • Updated .NET Reactor and IntelliLock support
  • Updated Eazfuscator.NET support
  • Updated ILProtector support
  • Updated MaxtoCode support
  • Updated Rummage support
  • Updated SmartAssembly support
  • Classes, fields etc containing east asian characters are normally not renamed anymore
  • Fixed stack overflow exception which could be thrown when deobfuscating huge methods
  • Old -> new tokens are printed if -v is used


All times are GMT +8. The time now is 01:51.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX