风吹屁屁凉 发表于 2014-6-23 11:25

ConfuserEx v0.1.2 Unpacker

i was done to unpack once it testing mode.
for max label unpacking i will give tuts in next turoial by cff explorer .

1. ConfuserExCallFixer for potection id = refproxy
2. ConfuserExDupPopPatcher for protection id => cflow encryption .
3. ConfuserExStringDecryptor for decrypt protection id => constant

Note
1. first use confusexcall fixer
2. second use ConfuserExStringDecryptor place in target direction for decrypt string . otherwise it will not works
3. ConfuserExDupPopPatcher patch the cflow for de4dot clean it . after patch cflow drop the target exe two time on de4dot cflow will cleaned .

- If you like this software or tools Give Thanks to codecracker .
- and also thanks to 0xd4d for his de4dot causes ConfuserExDupPopPatcher patch de4dot full cleaned the exe

My Next will tutroial should be how to decrypt hidden code ,protection id => anti-temper or maxlebeland how to dump protection id => compressor its easy as same before codecracker tutorial
https://forum.tuts4you.com/topic/30970-unpacking-confuser/
or
0xd4d tut https://forum.tuts4you.com/topic/30207-net-decrypt-confuser-19-methods/ .

before module name was __.Netmodule protection id compressor .
newer version protection id compressor module name koi.netmodule [ ConfuserEx v0.1.2 ]

bugs reports are welcome.

In next i will release de4dot - supported confuser working , only compressor dumping not finish . rest other finish but testing mod i will release it as soon as possible

DREAEMER 发表于 2014-6-23 12:03

thank for sharing

Some 发表于 2014-6-24 09:05

[-] Note
do not share these tools in any other forum .
到底还是国人啊。

Falcon_2015 发表于 2014-12-4 21:44

已经ConfuserEx v0.3.0也用工具测试了 没成功 不知道是自己操作不对 还是工具太老的原因O(∩_∩)O~ 大神更新一下吧

huaxiamengqing 发表于 2014-12-10 13:53

鉴定完毕,不能用脱ConfusedBy("Confuser v1.9.0.0")

shichaoran 发表于 2014-12-10 23:08

去强名吗?

haoer6238 发表于 2015-4-16 13:30

东西是非常好,可惜就是不咋会用,能不能制作一个教程啊

欧阳 发表于 2015-4-16 13:54

missjx137600 发表于 2016-6-28 12:56

非常感谢!
页: [1]
查看完整版本: ConfuserEx v0.1.2 Unpacker