Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 04-12-2009, 19:40
Soldat Soldat is offline
Friend
 
Join Date: Nov 2002
Posts: 14
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 0 Times in 0 Posts
Soldat Reputation: 0
.NET applications protection ID

Hello

is there protector identifier for .NET applications?

thanks
Reply With Quote
  #2  
Old 04-12-2009, 22:11
evlncrn8 evlncrn8 is offline
VIP
 
Join Date: Sep 2005
Posts: 179
Rept. Given: 36
Rept. Rcvd 54 Times in 24 Posts
Thanks Given: 49
Thanks Rcvd at 117 Times in 69 Posts
evlncrn8 Reputation: 54
err, protection id (pid.gamecopyworld.com) identifies .net protections
Reply With Quote
  #3  
Old 04-14-2009, 17:20
FrankTheCrazy
 
Posts: n/a
EXE Info PE (www.exeinfo.go.pl) can find some (but not all .NET protectors)
Reply With Quote
  #4  
Old 07-12-2009, 17:20
JohnSmith
 
Posts: n/a
PEID With Powerfull Database can detect any .net packer.

(i checked it with themida .net exe packed file.)
Reply With Quote
  #5  
Old 06-06-2013, 22:21
Conquest Conquest is offline
Friend
 
Join Date: Jan 2013
Location: 0x484F4D45
Posts: 125
Rept. Given: 46
Rept. Rcvd 29 Times in 17 Posts
Thanks Given: 31
Thanks Rcvd at 60 Times in 29 Posts
Conquest Reputation: 29
Dnid works best for me. protection fails someime. also u can try the new DIE
Reply With Quote
  #6  
Old 06-07-2013, 03:28
LordCoder LordCoder is offline
TEAM REiS
 
Join Date: May 2013
Location: TEAM REiS
Posts: 55
Rept. Given: 39
Rept. Rcvd 238 Times in 36 Posts
Thanks Given: 1
Thanks Rcvd at 15 Times in 9 Posts
LordCoder Reputation: 200-299 LordCoder Reputation: 200-299 LordCoder Reputation: 200-299
Use de4dot and put -d to see the obfuscator it is packed. Also you can check NET Reflector and scan it by yourself :P
Reply With Quote
  #7  
Old 06-07-2013, 22:35
congviet congviet is offline
Family
 
Join Date: Jun 2010
Location: Vi
Posts: 151
Rept. Given: 30
Rept. Rcvd 76 Times in 42 Posts
Thanks Given: 56
Thanks Rcvd at 52 Times in 30 Posts
congviet Reputation: 76
Try the "Obfuscator search" in addin Reflexil 1.6, DNid by Rue in Strong.Name.Helper.v1.7-whoknows, Dotnet Id by rongchaua and some above.
Reply With Quote
  #8  
Old 06-19-2013, 14:03
giv's Avatar
giv giv is offline
VIP
 
Join Date: Jan 2011
Location: Romania
Posts: 1,657
Rept. Given: 801
Rept. Rcvd 1,283 Times in 561 Posts
Thanks Given: 226
Thanks Rcvd at 562 Times in 240 Posts
giv Reputation: 1100-1299 giv Reputation: 1100-1299 giv Reputation: 1100-1299 giv Reputation: 1100-1299 giv Reputation: 1100-1299 giv Reputation: 1100-1299 giv Reputation: 1100-1299 giv Reputation: 1100-1299 giv Reputation: 1100-1299
I use DNiD
Attached Files
File Type: rar DNiD 1.0.rar (283.9 KB, 18 views)
Reply With Quote
  #9  
Old 06-19-2013, 15:23
kAy kAy is offline
Friend
 
Join Date: Oct 2011
Posts: 14
Rept. Given: 31
Rept. Rcvd 2 Times in 2 Posts
Thanks Given: 0
Thanks Rcvd at 4 Times in 4 Posts
kAy Reputation: 2
DNiD does not detect properly also the further development has stopped for it
Reply With Quote
  #10  
Old 06-19-2013, 17:36
wilson bibe wilson bibe is offline
VIP
 
Join Date: Nov 2012
Posts: 492
Rept. Given: 489
Rept. Rcvd 439 Times in 180 Posts
Thanks Given: 853
Thanks Rcvd at 176 Times in 112 Posts
wilson bibe Reputation: 400-499 wilson bibe Reputation: 400-499 wilson bibe Reputation: 400-499 wilson bibe Reputation: 400-499 wilson bibe Reputation: 400-499
Hello Soldat
I think that what you want, maybe you will have in a distant future, there are a lot of methods to create an obfuscator, Unlike the protector files (no .net compiled files). I have a lot of obfuscators (only searching in google) developed in a short period time by different developers, using different methodologies, so create a identifier for all is a difficult task, in fact a very difficult task.
Regards
Reply With Quote
  #11  
Old 06-20-2013, 02:04
LordCoder LordCoder is offline
TEAM REiS
 
Join Date: May 2013
Location: TEAM REiS
Posts: 55
Rept. Given: 39
Rept. Rcvd 238 Times in 36 Posts
Thanks Given: 1
Thanks Rcvd at 15 Times in 9 Posts
LordCoder Reputation: 200-299 LordCoder Reputation: 200-299 LordCoder Reputation: 200-299
Use as me de4dot with the option -d or also think about what packer is it by your own dissambling it.
Reply With Quote
  #12  
Old 12-08-2013, 15:27
0xd0000 0xd0000 is offline
Family
 
Join Date: Nov 2013
Posts: 51
Rept. Given: 3
Rept. Rcvd 37 Times in 14 Posts
Thanks Given: 9
Thanks Rcvd at 21 Times in 12 Posts
0xd0000 Reputation: 37
I worked with DNiD author, incredible dev, so talented, learned a ton from him. I never really found out why he stopped working on DNiD, after he enhanced the detection performance, things kind of stopped there.

If DNiD fails to give you what your looking for, crack open Reflector, CFF, ExeInfo, De4Dot, or the latest release of ProtectionID, you should be able to cross reference them and narrow it down.

Rue - if you read this, come and revive DNiD.
Reply With Quote
  #13  
Old 12-23-2013, 21:52
kAy kAy is offline
Friend
 
Join Date: Oct 2011
Posts: 14
Rept. Given: 31
Rept. Rcvd 2 Times in 2 Posts
Thanks Given: 0
Thanks Rcvd at 4 Times in 4 Posts
kAy Reputation: 2
last read that DNiD source was lost
Reply With Quote
  #14  
Old 12-26-2013, 04:14
0xd0000 0xd0000 is offline
Family
 
Join Date: Nov 2013
Posts: 51
Rept. Given: 3
Rept. Rcvd 37 Times in 14 Posts
Thanks Given: 9
Thanks Rcvd at 21 Times in 12 Posts
0xd0000 Reputation: 37
I have the source for the main project, but not the native scan.dll.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 18:24.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )