Dotnet Dumper x64bit

[obfuscator]

Hello Telents

i would like to know can anyone have a tool like CodeCracker's Megadumper which can dump the dotnet files from the ram ? like megadumper is working under 32bit environment only but for 64bit there is no alternative.

Regards

[cybercoder]

I think code was released for most of his dotnet tools, maybe mod it to work with x64.. Something for you to study

[CodeCracker]

X64NetDumper:
- Restore file name!

How to use guide:
Select target process, select a target directory (where all dumped files will be placed)! Enjoy!

[obfuscator]

Thank you so much CodeCracker

its really working well , in 64bit with dongle target can also get dumped if dongle attached

BR

[kOuD3LkA]

Thank you CodeCracker
Is it possible that someone share it on other download site?

[[ID]ZE]

For Win64 .Net programe,it happen some wrong.Dump the exe of WL encrypted ,it appears "it is not valid pe" when it run in Win64.

[sendersu]

https://www.sendspace.com/file/2aipq4

[NoYes]

Thank you very much CodeCracker.
BTW, it seems that you have forgotten confuse or encrypt the program.

[obfuscator]

@NoYes

he release his codes on sourceforce as open source so there is no need to hide anything

[ontryit]

CodeCracker: May be you also can share the source code here ?

[NoYes]

@obfuscator
Sorry, but I still can't find it. Can you provide the link to me?

[obfuscator]

@NoYes
you can find its code using reflector as dumper is not protected

[NoYes]

@obfuscator
If using reflector, there still need to fix some errors.
And I found the source code,
include:AssemblyLoad Confuser_Methods_Decryptor ConfuserDelegateKiller ConfuserStringDecryptor ExceptionLogger MegaDumper Reactor_Decryptor Resource_Decryptor Simple_MSIL_Decryptor StaticDecompressor Universal_Fixer. All of these have source code.

[leetone]

Ugh....Okay? At least post the URL you found it, otherwise your post does nothing for others!!

Here guys:

Thanks to CodeCracker, released May 2013 on Tuts4You

AssemblyLoad.7z
https://www.dropbox.com/s/fwbdqbn1en062kt/AssemblyLoad.7z?dl=0

Confuser_Methods_Decryptor.7z
https://www.dropbox.com/s/wqb1h41cemcr95l/Confuser_Methods_Decryptor.7z?dl=0

ConfuserDelegateKiller.7z:
https://www.dropbox.com/s/9enw4cinvx81umd/ConfuserDelegateKiller.7z?dl=0

ConfuserStringDecryptor.7z:
https://www.dropbox.com/s/sjg4k1e5azrsjse/ConfuserStringDecryptor.7z?dl=0

ExceptionLogger.7z:
https://www.dropbox.com/s/i52g33j5df7n2fh/ExceptionLogger.7z?dl=0

MegaDumper.zip:
https://www.dropbox.com/s/i52g33j5df7n2fh/ExceptionLogger.7z?dl=0

ReactorDecryptor.7z:
https://www.dropbox.com/s/5zazh2fcd0uggkt/Reactor_Decryptor.7z?dl=0

ResourceDecryptor.7z:
https://www.dropbox.com/s/bgxmregkf8iqbyj/Resource_Decryptor.7z?dl=0

SimpleMSILDecryptor.7z:
https://www.dropbox.com/s/z6p7jmvknnl6pan/Simple_MSIL_Decryptor.7z?dl=0

StaticDecompressor.7z:
https://www.dropbox.com/s/ra2jw12rlqirakn/StaticDecompressor.7z?dl=0

UniversalFixer.7z:
https://www.dropbox.com/s/vkv57jxc1i8bt37/Universal_Fixer.7z?dl=0

Source only.