.NET Reactor Slayer - .NET Reactor Unpacker 24/11/2021
本帖最后由 BlackHatRCE 于 2021-11-28 14:14 编辑.NET Reactor Slayer - 24/11/2021
An open source (GPLv3) deobfuscator for Eziriz .NET Reactor
Preview :
Currently Supported .NET Reactor Versions :
[*]6.0.0.0
[*]6.2.0.0
[*]6.3.0.0
[*]6.5.0.0
[*]6.7.0.0
[*]6.8.0.0
Features :
[*]Clean Control Flow
[*]Restore Hidden Calls
[*]Remove Proxy Calls
[*]Decrypt Strings
[*]Remove Anti Tamper
[*]Remove Anti Debugger
[*]Decrypt Resources
[*]Dump Embedded Assemblies
[*]Decrypt Methods (NecroBit)
[*]Unpack Native
[*]Decrypt Tokens
[*]
Usage :
Just drag and drop target obfuscated assembly on it.
Optional commands :
[*]--no-necrobit Don't decrypt methods (NecroBit).
[*]--no-anti-tamperDon't remove anti tamper.
[*]--no-anti-debug Don't remove anti debugger.
[*]--no-hide-call Don't restore hidden calls.
[*]--no-str Don't decrypt strings.
[*]--no-rsrc Don't decrypt assembly resources.
[*]--no-deob Don't deobfuscate methods.
[*]--no-arithmetic Don't resolve arithmetic equations.
[*]--no-proxy-call Don't clean proxied calls.
[*]--no-dump Don't dump embedded assemblies.
[*]--no-remove Don't remove obfuscator methods, resources, etc...
[*]--no-decrypt-token Don't decrypt tokens.
Note :
Its free, but there is no support for it, I'll keep updating it for latest .NET Reactor version as I can.
Credits :
[*]dnlib
[*]de4dot.blocks
Download - https://yadi.sk/d/N5PdBgy49oylYw # NetReactorSlayer
An open source (GPLv3) deobfuscator for (https://www.eziriz.com/reactor_download.htm)
# Preview:
!(https://user-images.githubusercontent.com/53654076/136684000-cf74924e-1769-4620-b5d7-92f0a692ecac.png)
# Currently Supported .NET Reactor Versions:
- 6.0.0.0
- 6.2.0.0
- 6.3.0.0
- 6.5.0.0
- 6.7.0.0
# Features:
- Clean Control Flow
- Restore Hidden Calls
- Remove Proxy Calls
- Decrypt Strings
- Remove Anti Tamper
- Remove Anti Debugger
- Decrypt Resources
- Dump Embedded Assemblies
- Decrypt Methods (NecroBit)
- Unpack Native
# Usage:
Just drag and drop target obfuscated assembly on it.
# Optional commands:
```
--no-necrobit Don't decrypt methods (NecroBit).
--no-anti-tamperDon't remove anti tamper.
--no-anti-debug Don't remove anti debugger.
--no-hide-call Don't restore hidden calls.
--no-str Don't decrypt strings.
--no-rsrc Don't decrypt assembly resources.
--no-deob Don't deobfuscate methods.
--no-arithmetic Don't resolve arithmetic equations.
--no-proxy-call Don't clean proxied calls.
--no-dump Don't dump embedded assemblies.
--no-remove Don't remove obfuscator methods, resources, etc...
```
# Note:
Its free, but there is no support for it, I'll keep updating it for latest .NET Reactor version as I can.
# Credits:
- (https://github.com/0xd4d/dnlib)
- (https://github.com/de4dot/de4dot/tree/master/de4dot.blocks) sajuuk1129 发表于 2021-11-30 23:06
还以 .NET Reactor不错，还想买呢，结果，最新都破了
你见到爆破了？？？，不可能的。最新的reactor加了代码虚拟化，codeviturallization,你可以尝试，不是每个人都能破解，挡住90%的人呢，除非哪些net破解高手。eazfuscator都可以，2400元左右，比dnguardn hvm便宜多了，技术服务都很不多。正版的确还用呢，如果想买二选一，eazfuscator,reactor 这工具强大，取名也很有味道，电影里面经常听到king slayer, 现在竟然看到.net reactor slayer，取名的作者应该是个历史影视迷，赞一下 github经常访问不了，把源代码和EXE分享出来,总共约1.2MB，毒盘可以接受
链接：https://pan.baidu.com/s/16k1rxJ_UkSwV5pkM_CHyFg
提取码：k1bh
非常强悍的工具，看来又有工具玩了，谢谢F大神 谢谢楼主分享,有空测试一下,de4dot应对一些情况有时不太好使 非常强悍的工具，看来又有工具玩了，谢谢大神 非常有用，共同学习，谢谢楼主分享。
感谢楼主分享{:1_921:} EnterpriseSolu 发表于 2021-10-11 08:31
github经常访问不了，把源代码和EXE分享出来,总共约1.2MB，毒盘可以接受
链接：https://pan.baidu.com/s ...
有成品么，感谢大佬，能搞成蓝云