Exetools  

Go Back   Exetools > General > General Discussion
Reload this Page What is the best deobfuscate of net
Register Forum Rules FAQ Calendar

Notices

Reply
Page 1 of 2 1 2
 
Thread Tools Display Modes
  #1  
Old 05-19-2011, 01:01
goku goku is offline
Banned User
  
Join Date: Feb 2009
Location: https://t.me/pump_upp
Posts: 128
Rept. Given: 30
Rept. Rcvd 34 Times in 15 Posts
Thanks Given: 23
Thanks Rcvd at 6 Times in 4 Posts
goku Reputation: 34
What is the best deobfuscate of net
What is the best deobfuscate of net 3.5 a 4
Reply With Quote
  #2  
Old 05-19-2011, 02:21
Kurapica's Avatar
Kurapica Kurapica is offline
VIP
  
Join Date: Jun 2009
Location: Archives
Posts: 198
Rept. Given: 20
Rept. Rcvd 144 Times in 43 Posts
Thanks Given: 74
Thanks Rcvd at 426 Times in 90 Posts
Kurapica Reputation: 100-199 Kurapica Reputation: 100-199
Can you rephrase your question please !?
Reply With Quote
  #3  
Old 05-19-2011, 02:36
goku goku is offline
Banned User
  
Join Date: Feb 2009
Location: https://t.me/pump_upp
Posts: 128
Rept. Given: 30
Rept. Rcvd 34 Times in 15 Posts
Thanks Given: 23
Thanks Rcvd at 6 Times in 4 Posts
goku Reputation: 34
sorry no understand traduce by google traslator
Reply With Quote
  #4  
Old 05-19-2011, 13:49
Av0id Av0id is offline
VIP
  
Join Date: Jan 2006
Posts: 399
Rept. Given: 112
Rept. Rcvd 111 Times in 69 Posts
Thanks Given: 0
Thanks Rcvd at 15 Times in 15 Posts
Av0id Reputation: 100-199 Av0id Reputation: 100-199
SAE i guess
Reply With Quote
  #5  
Old 05-19-2011, 18:58
-=bb=- -=bb=- is offline
Family
  
Join Date: Sep 2009
Location: slowly learning
Posts: 72
Rept. Given: 23
Rept. Rcvd 37 Times in 10 Posts
Thanks Given: 18
Thanks Rcvd at 23 Times in 9 Posts
-=bb=- Reputation: 37
I second Av0id and would suggest SAE.
Reply With Quote
  #6  
Old 05-19-2011, 22:05
goku goku is offline
Banned User
  
Join Date: Feb 2009
Location: https://t.me/pump_upp
Posts: 128
Rept. Given: 30
Rept. Rcvd 34 Times in 15 Posts
Thanks Given: 23
Thanks Rcvd at 6 Times in 4 Posts
goku Reputation: 34
I say this for any work with SmartAssembly 6
Reply With Quote
  #7  
Old 05-21-2011, 13:12
chessgod101's Avatar
chessgod101 chessgod101 is offline
Co-Administrator
  
Join Date: Jan 2011
Location: United States
Posts: 539
Rept. Given: 2,242
Rept. Rcvd 704 Times in 224 Posts
Thanks Given: 754
Thanks Rcvd at 1,021 Times in 191 Posts
chessgod101 Reputation: 700-899 chessgod101 Reputation: 700-899 chessgod101 Reputation: 700-899 chessgod101 Reputation: 700-899 chessgod101 Reputation: 700-899 chessgod101 Reputation: 700-899 chessgod101 Reputation: 700-899
There are some good deobfuscators here. One tool recovers strings from SmartAssembly. I do not know if this works for smartassembly 6 though.
Code:
_http://www.reteam.org/tools.html
Reply With Quote
The Following User Gave Reputation+1 to chessgod101 For This Useful Post:
sendersu (05-22-2011)
  #8  
Old 05-21-2011, 22:50
Av0id Av0id is offline
VIP
  
Join Date: Jan 2006
Posts: 399
Rept. Given: 112
Rept. Rcvd 111 Times in 69 Posts
Thanks Given: 0
Thanks Rcvd at 15 Times in 15 Posts
Av0id Reputation: 100-199 Av0id Reputation: 100-199
there are some tools on portal.b-at-s.net
Reply With Quote
The Following User Gave Reputation+1 to Av0id For This Useful Post:
sendersu (05-22-2011)
  #9  
Old 05-22-2011, 04:02
dedificator dedificator is offline
Friend
  
Join Date: Oct 2002
Posts: 89
Rept. Given: 4
Rept. Rcvd 16 Times in 6 Posts
Thanks Given: 0
Thanks Rcvd at 4 Times in 4 Posts
dedificator Reputation: 17
Hmmm ... "site temporarily closed"....
Reply With Quote
The Following User Gave Reputation+1 to dedificator For This Useful Post:
chessgod101 (05-22-2011)
  #10  
Old 11-02-2011, 02:36
g-max
 
Posts: n/a
I think de4dot is the best!

Code:
_https://github.com/0xd4d/de4dot
Reply With Quote
  #11  
Old 11-02-2011, 04:16
Syoma Syoma is offline
reverse engineer
  
Join Date: May 2009
Posts: 338
Rept. Given: 35
Rept. Rcvd 77 Times in 50 Posts
Thanks Given: 15
Thanks Rcvd at 78 Times in 51 Posts
Syoma Reputation: 77
d4d is a nice tool for assembly pre-processing, like names normalization, string deobfuscation for known protectors.
SAE is very powerful, but still needs active development. It is a bit complicated in use for newbies. And many thanks to the author for entity rename feature.
Reply With Quote
  #12  
Old 11-09-2011, 00:56
goku goku is offline
Banned User
  
Join Date: Feb 2009
Location: https://t.me/pump_upp
Posts: 128
Rept. Given: 30
Rept. Rcvd 34 Times in 15 Posts
Thanks Given: 23
Thanks Rcvd at 6 Times in 4 Posts
goku Reputation: 34
smartassembly , There is an automatic solution
Reply With Quote
  #13  
Old 11-09-2011, 02:00
sendersu sendersu is offline
VIP
  
Join Date: Oct 2010
Posts: 1,305
Rept. Given: 337
Rept. Rcvd 237 Times in 127 Posts
Thanks Given: 340
Thanks Rcvd at 652 Times in 357 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
Quote:
Originally Posted by goku View Post
smartasammbly , There is an automatic solution
<< is the best deobfuscate of net ?
Reply With Quote
  #14  
Old 02-02-2012, 11:27
johnpitt johnpitt is offline
Friend
  
Join Date: Aug 2010
Posts: 8
Rept. Given: 1
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 4
Thanks Rcvd at 0 Times in 0 Posts
johnpitt Reputation: 0
Smile
>> According to which obfuscator was used then find the best deobfuscate for it, i think!!
Reply With Quote
  #15  
Old 02-03-2012, 13:44
SaNX SaNX is offline
ex-eVC cracker
  
Join Date: Feb 2010
Location: Russia
Posts: 61
Rept. Given: 1
Rept. Rcvd 31 Times in 13 Posts
Thanks Given: 0
Thanks Rcvd at 1 Time in 1 Post
SaNX Reputation: 31
There is no alternative to SAE.
Reply With Quote
Reply
Page 1 of 2 1 2

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Deobfuscate Javascript, script can't be compiled bolzano_1989 General Discussion 11 01-18-2012 01:35
DeObfuscate for .NET? backdoor General Discussion 6 12-30-2010 05:03


All times are GMT +8. The time now is 07:07.

Aaron's homepage - Top

Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )