.NET
反编译
dnSpy/dnSpy: .NET debugger and assembly editor (github.com)
JustDecompile .NET 程序集反编译器和浏览器 - Telerik
uxmal/reko: Reko is a binary decompiler. (github.com)
c 反编译
avast/retdec: RetDec is a retargetable machine-code decompiler based on LLVM. (github.com)
安卓反编译
Lyana-nullptr/android-killer: 经典的安卓反编译工具。
skylot/jadx: Dex to Java decompiler
脱壳
- de4dot
de4dot/de4dot: .NET deobfuscator and unpacker. (github.com)
- de4dot-cex
GitHub - ViRb3/de4dot-cex: 📦 de4dot deobfuscator with full support for vanilla ConfuserEx
- NETReactorSlayer
- JitUnpacker
GitHub - wwh1004/JitUnpacker-Framework: A jit hook and unpacker framework
博客: .NET JIT脱壳指南与工具源码 - wwh1004 - 博客园 (cnblogs.com)
- Rzy-Protector-V2-unpacker
- de4dot-mod
HongThatCong/de4dot_mod: de4dot mod by HTC & Ngôn Nguyễn (github.com)
7.NETReactorSlayer
SychicBoy/NETReactorSlayer:用于 Eziriz .NET Reactor 的开源 (GPLv3) 解混淆器和解包器 (github.com)
混淆工具
使用虚拟化混淆!
- .net reactor
.NET Reactor - .NET Protection, .NET Obfuscator and Licensing (eziriz.com)
软件
Eziriz .NET Reactor 6.9.0 最新版(.NET代码加密混淆工具)
"*\dotNET_Reactor.Console.exe" -file "*.dll" -files "*.dll" -antitamp 1 -anti_debug 1 -hide_calls 1 -control_flow 1 -flow_level 9 -resourceencryption 1 -virtualization 1 -necrobit 1 -necrobit_comp 1
指定文件位置
.net refactor 命令行 - 空明流光 - 博客园
"C:\Program Files (x86)\Eziriz\.NET Reactor\dotNET_Reactor.Console.exe" -file "$(TargetPath)" -targetfile "<AssemblyLocation>\<AssemblyFileName>"
使用说明
- virbox
Virbox Protector官网-代码加密/混淆/虚拟化-全平台保护的加壳工具
- 混淆+白名单 demo
GitHub - 0xb11a1/yetAnotherObfuscator:绕过 Windows Defender 的 C# 混淆器
混淆系列文章
独立外壳加密流程 - 深思产品文档 (virbox.com)
java
反编译
- jadx
依赖 java 11