Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

.NET 

Avoid decompilation

I'm looking for ways to prevent my program from being decompilated - and have source code fucked.
I have already been suggested to look for obfuscators so is there any that you would recommend?

Further suggestions are welcome :)
For keeping away skids:
  • Use any obfuscater

  • Implement string/method/field encryption

  • Try to use server sided/hidden methods

  • Fiddle with the .Net header of your executable (Aeonhakc's NetProtecter can do this)



For keeping away professional decompilers:
  • You really can't. When there's a will, there's a way.


(Aug 6, 2014 12:56 AM)GenericSkid Wrote:  For keeping away skids:
  • Use any obfuscater

  • Implement string/method/field encryption

  • Try to use server sided/hidden methods

  • Fiddle with the .Net header of your executable (Aeonhakc's NetProtecter can do this)



For keeping away professional decompilers:
  • You really can't. When there's a will, there's a way.



Ok what about obfuscators?
I've never used one so don't really have feedbacks about them
(Aug 6, 2014 01:03 AM)Ombra Wrote:  Ok what about obfuscators?
I've never used one so don't really have feedbacks about them

Public obfuscators such as Confuser can easily be reversed. You'll need to do more than obfuscate to protect your assembly.
(Aug 6, 2014 01:09 AM)Odus Wrote:  Public obfuscators such as Confuser can easily be reversed. You'll need to do more than obfuscate to protect your assembly.

Guess you are right, but my aim is to prevent skids from accessing the source, so i assume if they don't known which obfuscator i used they can't do much, correct?
(Aug 6, 2014 01:15 AM)Ombra Wrote:  Guess you are right, but my aim is to prevent skids from accessing the source, so i assume if they don't known which obfuscator i used they can't do much, correct?

Pretty much. I'm not well versed in current obfuscaters as I don't really have a need to. All my programs are really for IRL friends. If I really need to do something, I use Aeonhacks's program I linked. Most people nope out if ILSpy won't decompile an assembly.
(Aug 6, 2014 02:25 AM)Odus Wrote:  Actually you'd be surprised how easy it is to reverse the changes of Confuser. Just drag and drop it onto de4dot and it does the rest for you.

de4dot dropped Confuser support a long time ago. There's been several new updates since the discontinuation.
шкідливе ПО для ентузіастів

Jabber: [email protected]
[email protected]

(Aug 6, 2014 02:25 AM)Odus Wrote:  Actually you'd be surprised how easy it is to reverse the changes of Confuser. Just drag and drop it onto de4dot and it does the rest for you.

Yeah but i assume Confuser is not the only free obfuscator :)
(Aug 6, 2014 01:54 AM)GenericSkid Wrote:  Pretty much. I'm not well versed in current obfuscaters as I don't really have a need to. All my programs are really for IRL friends. If I really need to do something, I use Aeonhacks's program I linked. Most people nope out if ILSpy won't decompile an assembly.

Aeonhack's program will only affect very little decompilers. Every assembly reader using either cecil, dnlib or asmresolver will be able to open it anyway. Since most are based on cecil, you won't get far with that.
https://github.com/Washi1337

"I'll tell you this UDP joke, and I don't care if you will get it or not."
(Aug 6, 2014 02:25 AM)Odus Wrote:  Actually you'd be surprised how easy it is to reverse the changes of Confuser. Just drag and drop it onto de4dot and it does the rest for you.

ConfuserEx (the successor of the Confuser project) is one of the best obfuscators. De4dot can't do anything with it if you not use it with the minimal protection settings.
(Aug 6, 2014 02:30 AM)Washi Wrote:  Aeonhack's program will only affect very little decompilers. Every assembly reader using either cecil, dnlib or asmresolver will be able to open it anyway. Since most are based on cecil, you won't get far with that.

But as far as OP is concerned, he's trying to keep away the hordes of skids who think ILSpy is the master-race decompiler. It does the job well enough. I'm not the most fluent HF member in terms of obfuscaters / decompilers so I just mentioned what would keep the majority of people away.
(Aug 6, 2014 03:06 AM)GenericSkid Wrote:  But as far as OP is concerned, he's trying to keep away the hordes of skids who think ILSpy is the master-race decompiler. It does the job well enough. I'm not the most fluent HF member in terms of obfuscaters / decompilers so I just mentioned what would keep the majority of people away.

ILSpy uses Mono.Cecil, therefore it will be able to be opened as well.
https://github.com/Washi1337

"I'll tell you this UDP joke, and I don't care if you will get it or not."


Possibly Related Threads...
Thread / Author Replies Views Last Post
[Java] by AussieJan 23, 2017 05:51 PM 9 139 Jan 23, 2017 05:51 PM
Last Post: Aussie
[C#] by JavaProphetOct 15, 2013 03:51 PM 6 1,253 Oct 15, 2013 03:51 PM
Last Post: JavaProphet
[C] by IluminiOct 11, 2011 06:23 PM 1 54 Oct 11, 2011 06:23 PM
Last Post: Shihanus