View Single Post
  #1  
Old 08-04-2026, 18:01
dawwinci dawwinci is offline
Friend
 
Join Date: May 2026
Location: Romania
Posts: 8
Rept. Given: 0
Rept. Rcvd 12 Times in 6 Posts
Thanks Given: 3
Thanks Rcvd at 31 Times in 7 Posts
dawwinci Reputation: 12
Krypton .NET Reactor devirtualizer

Krypton is a .NET Reactor-oriented devirtualizer: it tries to rebuild virtualized methods back into normal IL and produce a runnable devirtualized binary.

This is not a project I started from zero. It is based on the original work by PeterG75:
https://github.com/PeterG75/Krypton

My repo is a continuation fork: I modernized the codebase, extended the pipeline, and added tooling/tests on top of that foundation.

My fork (source)
https://github.com/dawwinci/krypton-devirtualizer

Highlights in this fork
  • Targets .NET 8 and updated dependencies (e.g. AsmResolver).
  • Refactored opcode-mapping into clearer stages (discovery, scoring, pruning, semantic repair, etc.).
  • Semantic validation and stack-related helpers to reduce unsafe mappings.
  • Payload / signature / profile-style structure in Core for easier extension.
  • Krypton.Tests plus extra tools/ utilities (e.g. StringOracle, updates to existing tools).
  • README documents build, run, env vars, and limitations.

Build / run
See the README on GitHub, typical flow is build with the provided script or dotnet, then run Krypton against an input assembly.

P.S. I’ve done some testing using challenges / samples (big thanks to everyone who posts those). The project is still very much a WIP, and there’s a lot left to improve. Forks, patches, and experiments are all welcome—feel free to change whatever you need. I’m not sure how often I’ll ship updates, but the repository will stay public.

Last edited by dawwinci; 08-04-2026 at 18:31.
Reply With Quote
The Following 2 Users Gave Reputation+1 to dawwinci For This Useful Post:
niculaita (08-05-2026), uranus64 (08-05-2026)
The Following 5 Users Say Thank You to dawwinci For This Useful Post:
besoeso (08-10-2026), Gyrus (08-05-2026), niculaita (08-05-2026), tonyweb (08-05-2026), uranus64 (08-05-2026)