+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] {Idea} Protect Visual Basic/.NET Applications with a native C++ app (/showthread.php?tid=893704)
Pages: Pages
1
2
* - xSilent - Dec 13, 2010
I used a loader method with just .NET for world-net that read the bot from resources then decrypted and used reflection, but 98% of coders here won't know what to do with a C compiler.
Nice POC, baby. ✌ (no homo, I'm saying baby since its in your name)
* - imi-tat0r - Dec 14, 2010
But the protected file is a ressource of your C++ "Loader" and the Loader is dropped and there you go. Get the ressource of your C++ Loader and decompile
* - DragonHunter - Dec 14, 2010
if you would dump the file somewhere to the hdd the protection is just useless because it's somewhere at the hdd
and if its using runPE you can just attach a debugger to it and dumping the file and protection gone
probably the best way to protect it just like writing ur program in C#/VB whatever and only making prototypes like..
public void lol() { } and thats it... and at the C++ side ull just hook the function 'lol' and putting in there some code for example
MessageBoxA(NULL, "this came from C++", "", MB_OK);
so when people even would be able to decompile ur .net program those functions will be empty 👍
* - µnKn0wn_H4CK3r - Dec 14, 2010
H3x0S Wrote:You will still have to store your .NET file somewhere, and it could be decrypted/extracted from there. This won't work.I'll store the encrypted .NET file in a resource file which will be compiled (C++). It can be decompiled, for sure, but not with a drag & drop..
xSilent Wrote:I used a loader method with just .NET for world-net that read the bot from resources then decrypted and used reflection, but 98% of coders here won't know what to do with a C compiler.Hm, ok. Thanks 🙂 .
Nice POC, baby. ✌ (no homo, I'm saying baby since its in your name)
imi-tat0r Wrote:But the protected file is a ressource of your C++ "Loader" and the Loader is dropped and there you go. Get the ressource of your C++ Loader and decompileHarder than drag & drop a .NET file in Reflector, right?
DragonHunter Wrote:if you would dump the file somewhere to the hdd the protection is just useless because it's somewhere at the hddI won't dump the protected file anywhere. For the 'RunPE', I'm ok.
and if its using runPE you can just attach a debugger to it and dumping the file and protection gone
probably the best way to protect it just like writing ur program in C#/VB whatever and only making prototypes like..
public void lol() { } and thats it... and at the C++ side ull just hook the function 'lol' and putting in there some code for example
MessageBoxA(NULL, "this came from C++", "", MB_OK);
so when people even would be able to decompile ur .net program those functions will be empty 👍
Then, if you only write the prototypes in C# and you implement the functions in C++, just write the entire program in C++..
* - This Girl Is On Fire - Dec 14, 2010
If the file is opened in memory, it can easily be dumped from memory. As it would have already been decrypted, then you will have a completely unsafe .net EXE.
* - µnKn0wn_H4CK3r - Dec 17, 2010
I added a pool. Please answer 🙂 !
* - xCocaine - Jan 5, 2011
Zevilone is right, if you run it in memory can be dumped and decrypted in 2 seconds..
* - µnKn0wn_H4CK3r - Jan 5, 2011
Ok, anyway, it's an old thread.
Closed.