PythEch
63607a6678
Fix string decryption for Eazfuscator.NET 5.1
...
v5.1 changes a few instructions in , other than it's almost the same
2016-01-23 17:09:01 +02:00
de4dot
4c684bb67e
Update copyright years
2015-10-29 22:45:26 +01:00
de4dot
02d6de8f39
Fix old Confuser deobfuscator code
2015-10-29 22:36:17 +01:00
de4dot
a0f12c4ad0
Update IsN00bUser()
2015-10-29 21:37:49 +01:00
de4dot
ea28306e9c
Update dnlib submodule
2015-10-29 21:37:37 +01:00
de4dot
eefa799e0d
Fix merge. Code used a much older dnlib version
2015-10-29 21:36:57 +01:00
de4dot
7cde561e6b
Merge branch 'confuser'
2015-10-29 21:36:34 +01:00
de4dot
436fe05756
Fix some older merges
2015-10-29 21:36:27 +01:00
0xd4d
f279bed1ed
Merge pull request #113 from saneki/only_cflow
...
Added option --only-cflow-deob for only deobfuscating control flow
2015-09-23 19:58:48 +02:00
saneki
e399d4ae2d
Added option --only-cflow-deob for only deobfuscating control flow
2015-09-22 11:06:45 -07:00
0xd4d
21318d2161
Merge pull request #111 from angelsl/master
...
CryptoObfuscator: Detect if decrypter should skip before reading flag or vice versa
2015-08-29 12:24:29 +02:00
angelsl
133814073c
Actually use index of the not opcode
...
Signed-off-by: angelsl <hidingfromhidden@gmail.com>
2015-08-28 00:01:40 +08:00
0xd4d
74408ae2dd
Merge pull request #112 from saneki/nix_friendly
...
Renamed file with proper capitalization (as referenced in project file)
2015-08-23 00:15:38 +02:00
saneki
ff708f8116
Renamed file with proper capitalization (as referenced in project file)
2015-08-22 16:25:30 -05:00
angelsl
ffeb7c9472
Detect if decrypter should skip before reading flag or vice versa
...
Seems like some versions of CryptoObfuscator skip the bytes before reading the
actual flag instead of the behaviour expected by de4dot currently.
Signed-off-by: angelsl <hidingfromhidden@gmail.com>
2015-08-21 15:57:44 +08:00
de4dot
39cf94964f
Remove 64-bit mscorlib refs from x64 csproj files
2015-08-15 11:08:17 +02:00
de4dot
111d0b538c
Add updated dnlib submodule
2015-08-15 11:01:11 +02:00
0xd4d
dfbbfc3fe0
Merge pull request #110 from saneki/eaz_5
...
Added support for Eazfuscator.NET 5.0 (string decryption)
2015-08-05 19:49:52 +02:00
saneki
94596d6fb7
Added support for Eazfuscator.NET 5.0
2015-08-04 17:52:02 -05:00
de4dot
828a1ab398
Move most of MemberRefFinder to dnlib
2015-07-19 23:47:45 +02:00
de4dot
9e2a9016d2
Move .NET resources read/writer code to dnlib
2015-07-08 08:02:34 +02:00
0xd4d
7a282f0962
Update README.md
2015-07-01 17:29:22 +02:00
de4dot
67703cb5be
Update dnlib URL and use latest commits
2015-07-01 17:11:22 +02:00
0xd4d
e0dfa64e31
Merge pull request #107 from mrexodia/dynamic_loading_fix
...
Dynamic loading fix
2015-05-23 10:02:49 +02:00
Mr. eXoDia
30aaeecafc
dictionary to make sure plugins can override the default deobfuscators
2015-05-22 21:17:57 +02:00
Mr. eXoDia
bf9bcd9ac5
plugin modules load first
2015-05-17 13:58:57 +02:00
Mr. eXoDia
0f1768b13f
fixed the last bracket problems
2015-05-17 13:40:27 +02:00
Mr. eXoDia
d71262657b
added a template deobfuscator module (not included in main solution)
2015-05-17 13:35:19 +02:00
Mr. eXoDia
c093eb26c5
dynamically load plugins named deobfuscator.*.dll
2015-05-17 13:30:06 +02:00
Mr. eXoDia
a3e0445f0a
make de4dot.code interface fully public
2015-05-17 13:29:48 +02:00
0xd4d
2eb27bfc54
Merge pull request #103 from snemes/master
...
Fixed a problem when one of the parent directories contain a dot.
2015-04-26 14:23:21 +02:00
Sandor Nemes
0952a5e22d
Fixed a problem when one of the parent directories contains a dot.
2015-04-26 09:52:57 +02:00
de4dot
bbe41696b1
Allow comparing privatescope fields/methods
2015-01-22 13:26:09 +01:00
de4dot
6cac38c4ab
Update dnlib
2015-01-22 13:24:20 +01:00
de4dot
d16a863a65
Remove email text
2014-09-14 08:35:08 +02:00
de4dot
42682d0fae
Add updated dnlib submodule
2014-07-25 21:34:58 +02:00
de4dot
3d0ce96614
Update README with dnlib URL
...
That is what most people forget when trying to compile de4dot.
2014-07-25 21:31:35 +02:00
de4dot
9e88a52a05
Add updated dnlib submodule
2014-05-30 00:39:08 +02:00
de4dot
890947af49
Also catch SecurityException
2014-05-30 00:38:13 +02:00
de4dot
01179242a7
DotNetFile prop was removed from dnlib, update code
2014-05-23 16:19:25 +02:00
de4dot
2c2cab7f16
Add updated dnlib submodule
2014-05-23 16:18:19 +02:00
de4dot
8c6f310ff3
Add de4dot.snk
2014-05-11 14:50:36 +02:00
de4dot
dcbe8f14f0
Add updated dnlib submodule
2014-05-11 14:50:24 +02:00
de4dot
a7d9b67b28
Merge branch 'master' into confuser
2014-05-10 09:20:54 +02:00
de4dot
282cabed87
Some updates because of new dnlib version
...
- Use a GenericParamContext when resolving tokens
- IDecrypter.GetMethodBody() method signature got updated
- ICustomAttributeType now implements IMethod so we don't need to cast it
- MemberRefFinder now scans all SecurityAttributes and MarshalType for types
2014-05-10 09:00:43 +02:00
de4dot
580cfaf201
Add updated dnlib submodule
2014-05-10 08:51:34 +02:00
de4dot
b60accb953
Don't email me when new versions come out
2014-05-09 16:00:17 +02:00
de4dot
954f0af743
Support latest CryptoObfuscator
2014-05-09 15:59:50 +02:00
de4dot
9b2ed7acca
Support new .NET Reactor resource encryption
2014-04-22 18:04:50 +02:00
de4dot
408acb6685
Update constants folder
2014-04-22 18:04:23 +02:00