Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

C# 

[C#] ILBlock - Block C#/VB.NET, IL code view in .NET Reflector

i was play with it and it would only let me block one function.

i was play with it and it would only let me block one function.
Thank you

i was play with it and it would only let me block one function.
Thank you
(Aug 8, 2011 05:57 AM)UbbeLoL Wrote:  Yes. You can prevent memory dumps (or at least hinder them) by messing with the PE header (e.g the magic bytes) but it has to be while the program is running, not when it's just laying on the HDD. :)

You can read more here: http://www.codeproject.com/KB/security/A...#Nanomites (Just find "Removing the portable executable header")

I normally don't old posts but that's an awesome article.
All of that information in one place. If anyone hasn't read it, you should.
Thanks buddy! 👍
Assuming you take a valid assembly and run your tool on this assembly, doesn't PEVerifiy.exe (coming with .Net SDK) complains when you check the modified assembly ?

Wow that shit is sick. Tested with multiple reflectors and none of them can read the code, yet the program is still working.


Possibly Related Threads...
Thread / Author Replies Views Last Post
[.NET] by GruntStylJun 28, 2021 12:35 PM 1 325 Jun 28, 2021 12:35 PM
Last Post: SaketSaket
[.NET] by DemoraliseSep 28, 2016 09:10 PM 6 431 Sep 28, 2016 09:10 PM
Last Post: Demoralise
[.NET] by PentestingOct 30, 2014 03:47 AM 4 375 Oct 30, 2014 03:47 AM
Last Post: Snoweyes