EXETOOLS FORUM  

Go Back   EXETOOLS FORUM > General > Community Tools

Notices

Reply
 
Thread Tools Display Modes
  #46  
Old 05-14-2016, 22:24
computerline computerline is offline
Friend
 
Join Date: Jun 2014
Posts: 31
Rept. Given: 40
Rept. Rcvd 26 Times in 10 Posts
Thanks Given: 32
Thanks Rcvd at 35 Times in 14 Posts
computerline Reputation: 26
Does anyone known how to set condition breakpoint in dnspy while debug. I want to run some code when the breakpoint is hit, but not found any way to set in dnspy. Thanks for any suggets
Reply With Quote
  #47  
Old 10-23-2016, 15:24
TechLord TechLord is offline
VIP
 
Join Date: Mar 2005
Location: PlanetTech
Posts: 451
Rept. Given: 365
Rept. Rcvd 174 Times in 75 Posts
Thanks Given: 483
Thanks Rcvd at 875 Times in 222 Posts
TechLord Reputation: 100-199 TechLord Reputation: 100-199
Version 3.0.0-beta released on 22 Oct 2016.

Get it here :

Quote:
https://ci.appveyor.com/api/buildjobs/g6lnwiweoifr3l8c/artifacts/dnSpy%2FdnSpy%2Fbin%2FdnSpy.zip
Reply With Quote
The Following 5 Users Say Thank You to TechLord For This Useful Post:
gsaralji (10-24-2016), Hypnz (10-23-2016), niculaita (10-23-2016), Tomy73 (10-23-2016), user_hidden (10-23-2016)
  #48  
Old 11-17-2016, 06:09
SKiLLa SKiLLa is offline
Friend
 
Join Date: Jul 2016
Location: Europe
Posts: 19
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 10
Thanks Rcvd at 6 Times in 6 Posts
SKiLLa Reputation: 0
dnSpy 3.0 Final was released 8 days ago and I must say (spent some time using it heavily by chance) I'm impressed, always had Reflector.Net on standby as backup, but not anymore !
Official download links: https://github.com/0xd4d/dnSpy/releases
Reply With Quote
  #49  
Old 11-24-2016, 14:06
WRP WRP is offline
Friend
 
Join Date: Nov 2010
Posts: 48
Rept. Given: 11
Rept. Rcvd 10 Times in 5 Posts
Thanks Given: 15
Thanks Rcvd at 11 Times in 7 Posts
WRP Reputation: 10
Any news about anti-anti-debug plugins ?
Reply With Quote
  #50  
Old 11-24-2016, 18:15
mr.exodia's Avatar
mr.exodia mr.exodia is offline
Super Moderator
 
Join Date: Nov 2011
Posts: 820
Rept. Given: 475
Rept. Rcvd 1,154 Times in 308 Posts
Thanks Given: 73
Thanks Rcvd at 428 Times in 168 Posts
mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299
@WRP ScyllaHide, it can be used on arbitrary processes with the command line injector.
__________________
x64dbg: http://x64dbg.com
My Blog: http://mrexodia.cf
Reply With Quote
The Following User Says Thank You to mr.exodia For This Useful Post:
WRP (11-25-2016)
  #51  
Old 11-26-2016, 14:31
kxjhlele
 
Posts: n/a
Thanks for great tool !
Reply With Quote
  #52  
Old 11-26-2016, 18:37
sendersu sendersu is online now
VIP
 
Join Date: Oct 2010
Posts: 603
Rept. Given: 321
Rept. Rcvd 211 Times in 105 Posts
Thanks Given: 68
Thanks Rcvd at 98 Times in 41 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
Quote:
Originally Posted by mr.exodia View Post
@WRP ScyllaHide, it can be used on arbitrary processes with the command line injector.
could you show a sample usage please?

2) are you sure it'll be working in case of .net app?
Reply With Quote
  #53  
Old 11-26-2016, 20:22
mr.exodia's Avatar
mr.exodia mr.exodia is offline
Super Moderator
 
Join Date: Nov 2011
Posts: 820
Rept. Given: 475
Rept. Rcvd 1,154 Times in 308 Posts
Thanks Given: 73
Thanks Rcvd at 428 Times in 168 Posts
mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299
@sendersu Read the manual. https://bitbucket.org/NtQuery/scyllahide/downloads/ScyllaHide.pdf And yes it will work but it might not disable .NET specific anti-debug tricks.
__________________
x64dbg: http://x64dbg.com
My Blog: http://mrexodia.cf
Reply With Quote
  #54  
Old 11-27-2016, 04:28
sendersu sendersu is online now
VIP
 
Join Date: Oct 2010
Posts: 603
Rept. Given: 321
Rept. Rcvd 211 Times in 105 Posts
Thanks Given: 68
Thanks Rcvd at 98 Times in 41 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
Thank you!
dnSpy already takes care of .NET specific debugging detection!
regarding method of standalone process protection,

say I use this approach for .net app:

2.0.1 Standalone (debugger-independent)
InjectorCLI.exe ”process name” ”HookLibrary.dll path”
For example: InjectorCLI.exe crackme.exe C:\HookLibrary.dll


will I be able after this run to debug the app using dnSpy and the app will be blind to native dbg detectors?
Reply With Quote
  #55  
Old 11-27-2016, 09:10
mr.exodia's Avatar
mr.exodia mr.exodia is offline
Super Moderator
 
Join Date: Nov 2011
Posts: 820
Rept. Given: 475
Rept. Rcvd 1,154 Times in 308 Posts
Thanks Given: 73
Thanks Rcvd at 428 Times in 168 Posts
mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299
@sendersu Try it. It should work fine...
__________________
x64dbg: http://x64dbg.com
My Blog: http://mrexodia.cf
Reply With Quote
Reply

Tags
0xd4d, dnspy

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 04:58.


ICP05004977
vBulletin Security provided by vBSecurity v2.2.0 (Lite) - vBulletin Mods & Addons Copyright © 2017 DragonByte Technologies Ltd.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX