.Net反编译&脱壳工具

918 阅读2分钟

.NET

反编译

dnSpy/dnSpy: .NET debugger and assembly editor (github.com)

dnSpyEx/dnSpy: Unofficial revival of the well known .NET debugger and assembly editor, dnSpy (github.com)

icsharpcode/ILSpy: .NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform! (github.com)

JustDecompile .NET 程序集反编译器和浏览器 - Telerik

uxmal/reko: Reko is a binary decompiler. (github.com)

c 反编译

avast/retdec: RetDec is a retargetable machine-code decompiler based on LLVM. (github.com)

安卓反编译

Lyana-nullptr/android-killer: 经典的安卓反编译工具。

skylot/jadx: Dex to Java decompiler

脱壳

  1. de4dot

de4dot/de4dot: .NET deobfuscator and unpacker. (github.com)

  1. de4dot-cex

GitHub - ViRb3/de4dot-cex: 📦 de4dot deobfuscator with full support for vanilla ConfuserEx

  1. NETReactorSlayer

GitHub - SychicBoy/NETReactorSlayer: An open source (GPLv3) deobfuscator and unpacker for Eziriz .NET Reactor

  1. JitUnpacker

GitHub - wwh1004/JitUnpacker-Framework: A jit hook and unpacker framework

博客: .NET JIT脱壳指南与工具源码 - wwh1004 - 博客园 (cnblogs.com)

  1. Rzy-Protector-V2-unpacker

illuZion9999/Rzy-Protector-V2-unpacker: An unpacker (deobfuscator) for the protector (obfuscator) Rzy Protector V2. (github.com)

  1. de4dot-mod

HongThatCong/de4dot_mod: de4dot mod by HTC & Ngôn Nguyễn (github.com)

7.NETReactorSlayer

SychicBoy/NETReactorSlayer:用于 Eziriz .NET Reactor 的开源 (GPLv3) 解混淆器和解包器 (github.com)

混淆工具

使用虚拟化混淆!

  1. .net reactor

.NET Reactor - .NET Protection, .NET Obfuscator and Licensing (eziriz.com)

软件

Eziriz .NET Reactor 6.9.0 最新版(.NET代码加密混淆工具)

image.png

"*\dotNET_Reactor.Console.exe" -file "*.dll" -files "*.dll" -antitamp 1 -anti_debug 1 -hide_calls 1 -control_flow 1 -flow_level 9 -resourceencryption 1 -virtualization 1 -necrobit 1 -necrobit_comp 1

指定文件位置

.net refactor 命令行 - 空明流光 - 博客园

"C:\Program Files (x86)\Eziriz\.NET Reactor\dotNET_Reactor.Console.exe" -file "$(TargetPath)" -targetfile "<AssemblyLocation>\<AssemblyFileName>"

使用说明

Command Line Parameters

.Net Reactor 使用心得 (加密)-CSDN博客

  1. virbox

Virbox Protector官网-代码加密/混淆/虚拟化-全平台保护的加壳工具

  1. 混淆+白名单 demo

GitHub - 0xb11a1/yetAnotherObfuscator:绕过 Windows Defender 的 C# 混淆器

混淆系列文章

独立外壳加密流程 - 深思产品文档 (virbox.com)

java

反编译

  1. jadx

依赖 java 11

skylot/jadx: Dex to Java decompiler