Exetools

Exetools (https://forum.exetools.com/index.php)
-   Community Tools (https://forum.exetools.com/forumdisplay.php?f=47)
-   -   Improve .NET Deobfuscator (https://forum.exetools.com/showthread.php?t=15145)

wilson bibe 07-21-2013 18:23

Improve .NET Deobfuscator
 
Short Description:
iMPROVE .NET it's a deobfuscator for packers that de4dot can't unpack. Current supported packers:

-DotBundle (only main exe and dlls unpacking)
-ExePack.NET
-.NetZ .NET Packer
-Macrobject Obfuscator .NET 2009
-.netshrink

Thanks to the author of this tool.....

WEB:http://sourceforge.net/projects/improvenetdeobf/

Searched in forum with the words iMPROVE, improve, and iMPROVE .NET Deobfuscator, nothing found.

Dreamer 07-22-2013 02:37

LordCoder rocks :)

LordCoder 07-23-2013 14:54

Added .NET Spin obfuscator. :D

wilson bibe 07-23-2013 18:16

A good tool that you developed LordCoder, I used in the obsfuscators dotbundle and netz, all files deobfuscated.

giv 07-23-2013 19:03

Hey LC...you are making good steps in the path that ded4dot did.
Congrats....
:)

LordCoder 07-23-2013 20:03

Thanks to all. That's what I want. I'm coding more deobfuscators soon I publish an update.

LordCoder 07-24-2013 17:00

New update to v0.1.2

What's new?

-DotWall obfuscator added
-Solved some detection errors

Download at: https://sourceforge.net/projects/improvenetdeobf/files/latest/download
Source it's on the Source Code directory.
:D

Av0id 07-31-2013 19:55

§ãould you take a look at obfuscar? not so hard, but time consuming

LordCoder 08-01-2013 17:15

@Av0id Thanks for the obfuscator :D I will take a look. Could you give me an example obfuscated? I don't knwo how to use it :P

wilson bibe 08-01-2013 18:57

1 Attachment(s)
Quote:

Originally Posted by LordCoder (Post 86062)
@Av0id Thanks for the obfuscator :D I will take a look. Could you give me an example obfuscated? I don't knwo how to use it :P

Hello LordCoder in attached the obfuscator
BR

LordCoder 08-01-2013 20:02

Thanks @wilson bibe. And how to use it? Because I drag and drop an example exe and it says it needs a project. I put a project but I can't find the obfuscated exe. Anyone knows how to obfuscate an assembly with Obfuscar?

And other question if someone knows something about NET-Twister obfuscator please explain me what's it. Thanks :)

wilson bibe 08-01-2013 21:35

Quote:

Originally Posted by LordCoder (Post 86065)
Thanks @wilson bibe. And how to use it? Because I drag and drop an example exe and it says it needs a project. I put a project but I can't find the obfuscated exe. Anyone knows how to obfuscate an assembly with Obfuscar?

And other question if someone knows something about NET-Twister obfuscator please explain me what's it. Thanks :)

Hello LordCoder
I believe that this obfuscator obfucate the code used in the VS to generate an exe file, and when you compile this code the result is an exe file obfuscated. I'm not sure but I believe that should be the principle

wilson bibe 08-07-2013 05:59

LordCoder upadated his toll to version v.0.1.3, link in the post#1,
Thanks LordCoder

LordCoder 08-14-2013 17:42

New Version 0.1.4 with some interesting and useful news:

Quote:

-Symbol renaming improved: now it only renames invalid and obfuscated names.
-New clean detection: before detection was bad. Now used some detections from native obfuscators.
-Added Phoenix Protector (thanks to Mr. eXoDia for saying me about this obfuscator).
-Clean code (deleted un-useful code and now it's a fast clean).
Av0id for next version I will add the obfuscar requested.

Click here to download: https://sourceforge.net/projects/improvenetdeobf/files/latest/download

LordCoder 08-14-2013 21:16

@Av0id For the obfuscar you can use the "Unknown Packer". This will rename all needed to see the code. You can use also the de4dot.


All times are GMT +8. The time now is 21:28.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX