How to Reverse Engineer C# and other .Net languages

[Its Leviosa]

Step 1) Download Jetbrains DotPeek
Step 2) Load the .exe file that you want the code for
Step 3) Profit ??



REing C++ and other languages is more complicated because it requires knowledge of assembly.

[Hell_Demon]

Won't work if the target has a decent obfuscator, although de4dot will probably take care of the most common ones.

[Azuki]

dotpeek is trash.
dnspy my dude

[Ninjin]

Step 1) Download Jetbrains DotPeek
Step 2) Load the .exe file that you want the code for
Step 3) Profit ??



REing C++ and other languages is more complicated because it requires knowledge of assembly.

Thats not even close to a "how-to" :P

Jetbrains DotPeek is kinda shit.

And if someone used a good obfuscator and not the .net obfuscator everyone is using still no profit...
There are some obfuscator which even de4dot can't handle.

And even dnspy can be fucked by a good obfuscation and others.

[Its Leviosa]

Confuser Ex V1.0 isn't covered by dot4peek

[Azuki]

There are some obfuscator which even de4dot can't handle.

And even dnspy can be fucked by a good obfuscation and others.

security and .net is a joke
if you can obfuscate the code you can deobfuscate. not a SINGLE obfuscator is safe, just because there arent public tools for it

[Hell_Demon]

security and .net is a joke
if you can obfuscate the code you can deobfuscate. not a SINGLE obfuscator is safe, just because there arent public tools for it

This is not exactly true. If variable names are completely destroyed there's no getting them back, this combined with some other tricks makes it very hard to obtain readable code.

[BlackBayse]

Thats not even close to a "how-to" :P

Jetbrains DotPeek is kinda shit.

And if someone used a good obfuscator and not the .net obfuscator everyone is using still no profit...
There are some obfuscator which even de4dot can't handle.

And even dnspy can be fucked by a good obfuscation and others.

Extreme Injector

[Biesi]

This is not exactly true. If variable names are completely destroyed there's no getting them back, this combined with some other tricks makes it very hard to obtain readable code.

Not exactly true because "security by obscurity" generally is a joke?

If you want something to be secure, hide it from the client.

[Hell_Demon]

Not exactly true because "security by obscurity" generally is a joke?

If you want something to be secure, hide it from the client.

There's a reason it's called obfuscation :P Obviously it won't offer 100% protection, but a good obfuscator can make reverse engineering a living nightmare. Just take a look at Denuvo(DRM), it initially took months for people to crack Denuvo protected games. I think the only reason it eventually got cracked is because more and more titles started using it. Initially the time it took to crack was too much, causing a lot of crackers to simply give up as there wasn't enough incentive to spend months on a single game.

[Stacymom]

dotpeek is trash.
dnspy my dude

exactly. I'd go with dnspy too. Other ones I tried were just a bunch of <insertbadwordshere>

[icotokenservice]

Great tip here

[Not Officer]

Confuser Ex V1.0 isn't covered by dot4peek

There are modded versions of de4dot for confuserex.