Exetools

Exetools (https://forum.exetools.com/index.php)
-   Community Tools (https://forum.exetools.com/forumdisplay.php?f=47)
-   -   de4dot - Deobfuscator for .NET (https://forum.exetools.com/showthread.php?t=13951)

Conquest 11-20-2013 02:14

Quote:

Originally Posted by 0xd4d (Post 88136)
New version: 3.0.2

https://bitbucket.org/0xd4d/de4dot
  • Updated Agile.NET support
  • Updated CryptoObfuscator support
  • Updated Dotfuscator support
  • Updated .NET Reactor and IntelliLock support
  • Updated Eazfuscator.NET support
  • Updated ILProtector support
  • Updated MaxtoCode support
  • Updated Rummage support
  • Updated SmartAssembly support
  • Classes, fields etc containing east asian characters are normally not renamed anymore
  • Fixed stack overflow exception which could be thrown when deobfuscating huge methods
  • Old -> new tokens are printed if -v is used

This is what i was looking for . as always great work sir.

nikre 11-20-2013 02:28

@0xd4d
good job bro
nice see resume your project

s0me0n3 11-25-2013 03:34

v3.0.3 - Nov 22 2013

- bool[]/char[] access instructions are now restored when devirtualizing CSVM code
- Updated Eazfuscator.NET version detection code

direct download

besoeso 11-25-2013 06:47

I hope DNGuard HVM go to the hands him.:rolleyes:

papi 12-25-2013 08:02

Can you please add LogicNP?

Regards

n00b 01-13-2014 11:27

Mate, LogicNP's CryptoObfuscator is already in there - quite great working aswell :)

nikkapedd 02-14-2014 02:34

The program still get errors with "CliSecure"
ERROR: Method System.Void .cctor() (06000B25) is not defined in this module (X.....exe)
Ignored 33 warnings/errors

giv 02-14-2014 02:50

AFAIK the sources are available. Just update for yourself if you think something is wrong. Is a free software. We just need to be happy with what we get.

0xd4d 04-15-2014 01:27

New de4dot 3.1.41592:
  • Support Agile.NET 6.3.0.10 - 6.3.0.18
  • Support CryptoObfuscator (latest build)
  • Support Eazfuscator.NET 4.2 - 4.3
  • Support ILProtector 2.0.11.1 - 2.0.13.1
  • Support more MaxtoCode runtimes
  • Detect .NET Reactor 4.8
  • Fix bug in Spices.Net resource renamer
  • Fix rare CSVM parser bug (it would fail to devirtualize all methods)

The de4dot project is now back @ github.com: https://github.com/0xd4d/de4dot . This also fixes some old links. :)

https://github.com/0xd4d/de4dot/releases

leetone 04-23-2014 12:36

Thank you for the updated link 0xd4d, I was just going to post it here! I really like your work buddy and the improvements are fantastic, I'm the guy who asked you about a .dll encrypted with cryptobfuscator and you said it'll be released sometime in april....Maybe you remember me, I don't know how many e-mails you get :)

Thank you for the changes, thank you for the source; I was actually using the previous version with a changed source that patched the cryptobfuscator bug and made it work for me...so thank you for the program you've provided as well as the source code to do what we want with it ^^

peace. I'll e-mail you any other errors I find but this seems pretty rock-solid!

TempoMat 05-02-2014 05:49

latest binary zu share?
 
Does anyone has a compiled binary for the latest version 3.1.41592 to share?
Unfortunately I don't have Visual Studio installed to compile the source code.

Thanks.

s0me0n3 05-02-2014 07:16

Here is a direct mirror of the compiled binaries for you guys in case
you won't be able to download it directly form there for longer time:
click me

nikkapedd 05-15-2014 00:18

1 Attachment(s)
i builded the The de4dot gui with VS 2010 & 2012
in attachment the vs2010 build.. Put the file in the dedot4 directory where are de4dot &
de4dot-x64..
You can now simply drop your protected file then click on the button deobfuscate..
[winrar v5 archive]
Enjoy

leetone 05-15-2014 11:15

Nikkapedd can you PLEASE pm me a link to the GUI you created for de4dot? I can't download attachments yet. I'm having some issues I think this can assist with.

Sir.V65j 05-15-2014 15:08

Quote:

Originally Posted by nikkapedd (Post 91393)
i builded the The de4dot gui with VS 2010 & 2012
in attachment the vs2010 build.. Put the file in the dedot4 directory where are de4dot &
de4dot-x64..
You can now simply drop your protected file then click on the button deobfuscate..
[winrar v5 archive]
Enjoy

My friend(Mahmoudnia) coded this tool, you can see in file copyright.
his post in tuts4you:
https://forum.tuts4you.com/topic/35281-de4dotui/


All times are GMT +8. The time now is 05:16.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX