From Collaborative RCE Tool Library
.NET Deobfuscation Tools
| Tool name: | .NET DeObfuscator |
| ||
|---|---|---|---|---|
| Author: | Kurapica | |||
| Website: | http://www.woodmann.com/forum/showthread.php?t=11810 | |||
| Current version: | 0.5 | |||
| Last updated: | June 11, 2008 | |||
| Direct D/L link: | Locally archived copy | |||
| License type: | Free | |||
| Description: | This is a tool to deobfuscate names only in Assemblies, It doesn't deobfuscate control-flow. This tool is supposed to make our life easier when exploring in Reflector, so the deobfuscated assembly in most cases won't run and it's meant to be used in Reflector for analysis only. What this tool does is that it renames Classes and other member of assembly like Procedures and Fucntion into more understandable names for easier analysis, for example it renames a Class of type Form to "Class10_Form" instead of "xhfkd9oekfpklgpf" as we see in assemblies obfuscated with xenocode or any other obfuscator, I didn't want it to release it at first, but when I added type detection to renaming process it became more useful. | |||
| Also listed in: | (Not listed in any other category) | |||
| More details: | Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry) | |||
| Tool name: | dotNetTools Win32 |
| ||
|---|---|---|---|---|
| Author: | PV Logiciels | |||
| Website: | http://dotnetprotector.pvlog.com/Tools.aspx | |||
| Current version: | 1.0 | |||
| Last updated: | November 8. 2008 | |||
| Direct D/L link: | http://dotnetprotector.pvlog.com/downloads/dotNetToolsWin32.msi | |||
| License type: | Free | |||
| Description: | dotNet Tools is a freeware suite that includes dotNet Sniffer, PvLog DeObfuscator and PvLog LicenseManagerKiller. dotNet Sniffer uses the .NET profiler API to save assemblies loaded from memory. PvLog Deobfuscator is a MSIL code optimizer that makes more readable obfuscated code. LicenseManagerKiller is a tool that removes LicenseProvider attributes in the assembly. | |||
| Also listed in: | .NET Tools, .NET Unpackers | |||
| More details: | Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry) | |||
| Tool name: | PvLog DeObfuscator Win32 |
| ||
|---|---|---|---|---|
| Author: | PV Logiciels | |||
| Website: | http://dotnetprotector.pvlog.com/Tools.aspx | |||
| Current version: | 1.0 | |||
| Last updated: | November 8, 2008 | |||
| Direct D/L link: | http://dotnetprotector.pvlog.com/downloads/DeObfuscatorWin32.zip | |||
| License type: | Free | |||
| Description: | PvLog Deobfuscator is a MSIL code optimizer. One side effect of the optimizer is that it can make more readable obfuscated code. PvLog DeObfuscator can also rename the types and names of members to further improve readability. This tool does not require installation: you just need to run the executable. DeObfuscator is also available in 32 and 64 bit, but we recommend you use the version that corresponds to the architecture of the assembly to optimize. The assembly generated by Deobfusctator may not always run because of protective measures implemented in the assembly (protection against code modification), but should be able to load in reflector. NOTE: the attribute that prevents ILDASM is not removed by DeObfuscator... but it could ! | |||
| Also listed in: | .NET Tools | |||
| More details: | Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry) | |||
Feed containing all updates and additions for this category.
Feed containing all updates and additions for this category, including sub-categories.
