Exetools  

Go Back   Exetools > General > Community Tools

Notices

Reply
 
Thread Tools Display Modes
  #46  
Old 05-14-2016, 22:24
computerline computerline is offline
Friend
 
Join Date: Jun 2014
Posts: 69
Rept. Given: 40
Rept. Rcvd 27 Times in 11 Posts
Thanks Given: 95
Thanks Rcvd at 106 Times in 44 Posts
computerline Reputation: 27
Does anyone known how to set condition breakpoint in dnspy while debug. I want to run some code when the breakpoint is hit, but not found any way to set in dnspy. Thanks for any suggets
Reply With Quote
The Following User Says Thank You to computerline For This Useful Post:
Indigo (07-19-2019)
  #47  
Old 10-23-2016, 15:24
TechLord TechLord is offline
Banned User
 
Join Date: Mar 2005
Location: 10 Steps Ahead of You
Posts: 786
Rept. Given: 389
Rept. Rcvd 247 Times in 112 Posts
Thanks Given: 806
Thanks Rcvd at 2,056 Times in 596 Posts
TechLord Reputation: 200-299 TechLord Reputation: 200-299 TechLord Reputation: 200-299
Version 3.0.0-beta released on 22 Oct 2016.

Get it here :

Quote:
https://ci.appveyor.com/api/buildjobs/g6lnwiweoifr3l8c/artifacts/dnSpy%2FdnSpy%2Fbin%2FdnSpy.zip
Reply With Quote
The Following 6 Users Say Thank You to TechLord For This Useful Post:
gsaralji (10-24-2016), Hypnz (10-23-2016), Indigo (07-19-2019), niculaita (10-23-2016), Tomy73 (10-23-2016), user_hidden (10-23-2016)
  #48  
Old 11-17-2016, 06:09
SKiLLa SKiLLa is offline
Friend
 
Join Date: Jul 2016
Location: Europe
Posts: 29
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 18
Thanks Rcvd at 17 Times in 16 Posts
SKiLLa Reputation: 0
dnSpy 3.0 Final was released 8 days ago and I must say (spent some time using it heavily by chance) I'm impressed, always had Reflector.Net on standby as backup, but not anymore !
Official download links: https://github.com/0xd4d/dnSpy/releases
Reply With Quote
The Following User Says Thank You to SKiLLa For This Useful Post:
Indigo (07-19-2019)
  #49  
Old 11-24-2016, 14:06
WRP WRP is offline
Family
 
Join Date: Nov 2010
Posts: 115
Rept. Given: 13
Rept. Rcvd 36 Times in 21 Posts
Thanks Given: 70
Thanks Rcvd at 167 Times in 71 Posts
WRP Reputation: 36
Any news about anti-anti-debug plugins ?
Reply With Quote
The Following User Says Thank You to WRP For This Useful Post:
Indigo (07-19-2019)
  #50  
Old 11-24-2016, 18:15
mr.exodia's Avatar
mr.exodia mr.exodia is offline
Super Moderator
 
Join Date: Nov 2011
Posts: 858
Rept. Given: 497
Rept. Rcvd 1,155 Times in 309 Posts
Thanks Given: 92
Thanks Rcvd at 744 Times in 355 Posts
mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299
@WRP ScyllaHide, it can be used on arbitrary processes with the command line injector.
__________________
x64dbg: http://x64dbg.com
My Blog: http://mrexodia.cf
Reply With Quote
The Following 2 Users Say Thank You to mr.exodia For This Useful Post:
Indigo (07-19-2019), WRP (11-25-2016)
  #51  
Old 11-26-2016, 14:31
kxjhlele
 
Posts: n/a
Thanks for great tool !
Reply With Quote
  #52  
Old 11-26-2016, 18:37
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 828
Rept. Given: 324
Rept. Rcvd 216 Times in 110 Posts
Thanks Given: 167
Thanks Rcvd at 342 Times in 192 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
Quote:
Originally Posted by mr.exodia View Post
@WRP ScyllaHide, it can be used on arbitrary processes with the command line injector.
could you show a sample usage please?

2) are you sure it'll be working in case of .net app?
Reply With Quote
The Following User Says Thank You to sendersu For This Useful Post:
Indigo (07-19-2019)
  #53  
Old 11-26-2016, 20:22
mr.exodia's Avatar
mr.exodia mr.exodia is offline
Super Moderator
 
Join Date: Nov 2011
Posts: 858
Rept. Given: 497
Rept. Rcvd 1,155 Times in 309 Posts
Thanks Given: 92
Thanks Rcvd at 744 Times in 355 Posts
mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299
@sendersu Read the manual. https://bitbucket.org/NtQuery/scyllahide/downloads/ScyllaHide.pdf And yes it will work but it might not disable .NET specific anti-debug tricks.
__________________
x64dbg: http://x64dbg.com
My Blog: http://mrexodia.cf
Reply With Quote
The Following User Says Thank You to mr.exodia For This Useful Post:
Indigo (07-19-2019)
  #54  
Old 11-27-2016, 04:28
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 828
Rept. Given: 324
Rept. Rcvd 216 Times in 110 Posts
Thanks Given: 167
Thanks Rcvd at 342 Times in 192 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
Thank you!
dnSpy already takes care of .NET specific debugging detection!
regarding method of standalone process protection,

say I use this approach for .net app:

2.0.1 Standalone (debugger-independent)
InjectorCLI.exe ”process name” ”HookLibrary.dll path”
For example: InjectorCLI.exe crackme.exe C:\HookLibrary.dll


will I be able after this run to debug the app using dnSpy and the app will be blind to native dbg detectors?
Reply With Quote
The Following User Says Thank You to sendersu For This Useful Post:
Indigo (07-19-2019)
  #55  
Old 11-27-2016, 09:10
mr.exodia's Avatar
mr.exodia mr.exodia is offline
Super Moderator
 
Join Date: Nov 2011
Posts: 858
Rept. Given: 497
Rept. Rcvd 1,155 Times in 309 Posts
Thanks Given: 92
Thanks Rcvd at 744 Times in 355 Posts
mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299
@sendersu Try it. It should work fine...
__________________
x64dbg: http://x64dbg.com
My Blog: http://mrexodia.cf
Reply With Quote
The Following User Says Thank You to mr.exodia For This Useful Post:
Indigo (07-19-2019)
  #56  
Old 12-13-2017, 02:32
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 828
Rept. Given: 324
Rept. Rcvd 216 Times in 110 Posts
Thanks Given: 167
Thanks Rcvd at 342 Times in 192 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
Rock solid brand new feature -

Debugging Unity Games

https://github.com/0xd4d/dnSpy/wiki/Debugging-Unity-Games
Reply With Quote
The Following 2 Users Say Thank You to sendersu For This Useful Post:
Indigo (07-19-2019), tonyweb (12-14-2017)
  #57  
Old 12-13-2017, 03:49
Syoma Syoma is offline
reverse engineer
 
Join Date: May 2009
Posts: 338
Rept. Given: 35
Rept. Rcvd 77 Times in 50 Posts
Thanks Given: 15
Thanks Rcvd at 77 Times in 50 Posts
Syoma Reputation: 77
Waiting for "rock solid brand new feature" assign aliases to variables/params.
Reply With Quote
The Following User Says Thank You to Syoma For This Useful Post:
Indigo (07-19-2019)
  #58  
Old 12-13-2017, 16:31
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 828
Rept. Given: 324
Rept. Rcvd 216 Times in 110 Posts
Thanks Given: 167
Thanks Rcvd at 342 Times in 192 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
How about opening up a ticket @github?
Reply With Quote
The Following User Says Thank You to sendersu For This Useful Post:
Indigo (07-19-2019)
  #59  
Old 12-13-2017, 17:35
Syoma Syoma is offline
reverse engineer
 
Join Date: May 2009
Posts: 338
Rept. Given: 35
Rept. Rcvd 77 Times in 50 Posts
Thanks Given: 15
Thanks Rcvd at 77 Times in 50 Posts
Syoma Reputation: 77
It is already there for a long time.
Reply With Quote
The Following User Says Thank You to Syoma For This Useful Post:
Indigo (07-19-2019)
  #60  
Old 12-13-2017, 19:06
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 828
Rept. Given: 324
Rept. Rcvd 216 Times in 110 Posts
Thanks Given: 167
Thanks Rcvd at 342 Times in 192 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
at least its under tracking!

https://github.com/0xd4d/dnSpy/milestone/3


"no due date"
Reply With Quote
The Following User Says Thank You to sendersu For This Useful Post:
Indigo (07-19-2019)
Reply

Tags
0xd4d, dnspy

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 18:11.


��ICP��05004977��
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX