Lists of .NET Deobfuscator / Unpacker (Open Source)
-
- AgileStringDecryptor - A dynamic agile string decryptor that relies on invoke.
- Agile.NET-Deobfuscator - Deobfuscates Agile.NET controlflow, strings, and proxy delegates. Please let me know for new updates or any other problems. Throughout the full source on every line it contains comments so you can easily understand the process behind it. Enjoy!
- AgileDotNet-StringDeobfuscator - Quickly decrypts strings from Agile.NET (aka AgileDotNet, CliSecure) packed assemblies. Supports multiple modules.
- AgileDotNetSlayer - A simple and open source (GPLv3) deobfuscator for Agile.NET
-
-
-
-
-
- BabelDeobfuscator - BabelDeobfuscator is an open-source deobfuscator for BabelObfuscator
- DeBabelVM - DeBabelVM is a restorer for the Babel Obfuscator - This will restore 'msil encrypt' methods for Babel
- Babel-Deobfuscator - Babel-Deobfuscator is an open-source deobfuscator for Babel Obfuscator.
- BabelTrialRemover - Remove/Disable Babel Obfuscator 30 Day limit from apps (tested on 9.7.5.0)
-
-
-
- beeless - BeeByte Deobfuscator. Used it to deobfuscate an Unity3D Game. Alternatively, de4dot works aswell.
- Beebyte-Deobfuscator - A plugin for Il2CppInspector that performs quasi deobfuscation
- BB-Deob - BeeByte Deobfuscator (RENAME)
- proshine-cleaner - A small tool to clean an assembly obfuscated with Beebyte's obfuscator.
-
-
-
-
-
-
- de4dot - .NET deobfuscator and unpacker.
- de4dot-cex - de4dot deobfuscator with full support for vanilla ConfuserEx
-
-
-
-
-
-
-
- EazFixer - A deobfuscation tool for Eazfuscator.
- eazdevirt -Devirtualizer for Eazfuscator.NET
-
- habib-deobfuscator-1 - This is part One of my Habib Deobfuscator which will decrypt the actual stub from the packer/security
-
Fixer Replacer Simplifier Remover Decompressor
- AssemblyRebuilderOld - [Obsolete] Fixup .Net Assembly dumped, if it can't work.
- AssemblyFixer -
Fix assembly pe header and metadata errors
- RzyFixer - A .NET Unpacker tool, with many features. Using dnlib assembly & cui for the design.
- CalliFixer - Here is a little program that remove calli protection from files, easy to use & easy to understand. Using the dnlib assembly.
- Base64Encoding-Fixer - Little tool that i made cuse i'm bored rn, fix the string encryption protection (the one which encrypt strings to base64 made by forgothisname). Using dnlib assembly.
- DoubleParseFixer - Little program that i made to fix Double Parse obfuscation. Using dnlib assembly.
- Dumpy - Simple .NET Assembly deobfuscator.
- IntToString-Deobfuscator - deobfuscator for int to string mutation (C#) supports negative values
- Local2FieldFixer - Remove Fields From GlobalType To Locals
- SizeOf-Fixer -Fix the sizeof of assembly
- SuperCalculator - Helpful tool which handle most operations used in obfuscation
- Mathematical-Operation-Simplifier -Mathematical Operation Simplifier for .NET Applications
- SizeOf-Replacer - SizeOf Replacer for .NET Applications
- Junk-Remover - .NET attributes cleaner/Junk remover (nops).
- ProxyCall-Remover - Deobfuscator for remove proxy calls methods
- PointMutationRemover -
Does exactly what the title says, removes Point Mutations. Only supported with 2D points at the moment.
- Universal-Math-Fixer -
This calculator load all methods from mscorlib.dll and checks equivalence with the method from the instruction
- SimpleMathCleaner -
Simple Math Cleaner with invoke method for generic use
- AntiDecompiler-Cleaner - An exception occurred when decompiling this method
- AntiInvokeDetection - most string deobfuscators use Invoke to pick up the strings, however some obfuscators are using "GetCallingAssembly" to check if the method is being executed by another assembly
- Excess-Nop-Remover - Remove excess nop opcodes
- Universal-Proxy-Remover - A simple and universal .NET proxy remover
- ProxyCall-Remover - Deobfuscator for remove proxy calls methods
- UnSealer - A Deobfuscator Base Which Uses Plugins And Multi-Platform Of Assembly Lib's | Its Easy To Build On Download Now Make Ur Own Plugin !
- Simple-Costura-Decompressor - Simple tool to extract and decompress embedded resources processed by Fody Costura
- Fody-Costura-Decompress - Fody-Costura Decompress
- netshrinkTrialRemover - Removes Trial Restrication from .netshrink Applications (tested on v2.9)
- PEXTUnion - Cleaner & Extractor for PEUnion (tested on PEunion 3.1.5)
- NETz_Unpacker - Unpacker for NETz Compressor
- MutationCleaner - Mod of DevT02's Point Mutation Remover. Now supports TimeSpan Mutations & Now has Better CUI
- CCFlow - a control flow (cflow) cleaner
- GruMinion - Full Deobfuscator for PEUnion 4.0.0 (.NET & PE32)
- EazRemoveTrial - After protected with Eazfuscator trial version then drag your protected file into EazRemoveTrial.exe, So you can use it forever not for 7 days, Working with lastest version
- DotNetReactorTrialRemover - Remove 14-Days Trial with this tool. Made with Harmony by Cabbo.
- EazFuscatorTrialRemover - Remove 7-Days EazFuscator Trial with this tool. Made with Harmony.
-
- ILProtectorUnpacker - ILProtector Unpacker Script
- ILUnpacker - A simple unpacker for ILProtector. Supported versions <= 2.0.21.4.
- ILUnpacker - Different approach on unpacking ILProtector (Latest)
-
- OldRod - An automated KoiVM devirtualisation utility
- Rhydon - Rhydon
-
- LoGeek - LoGiC.NET Deobfuscator, supports all protections except proxy calls, currently getting updated to work with LoGiC.NET v1.5
- DuckiKov - Cleaner for kov.NET (Modded LoGiC.NET)
- LoGiC.NET-Deobfuscator - Deobfuscator for LoGiC.NET Obfuscator.
-
-
-
- Deoxys - Deoxys is a Devirtualization utility for NashaVM, a Virtual Machine which runtime was made in C++/CLI
- TheBear - .NET Devirtualizer for NashaVM that Gabtiex made for nothing.
-
-
-
- UniShield - Deobfuscator for NetShield Protector
-
-
-
- Unfold - Unfold is a simple tool that extract Assmebly packed with Origami.
- PaperPlane - Yet Another Origami Unpacker but this one has amogus jokes and support XOR encryption
-
- .NET-Virtualized-App-Patcher - This is a universal Patcher that I coded for Virtualized Applications. Protected by KoiVM/EazVM/AgileVM. The project idea wasn't mine at all it was by xsilent and Tobito and they released a txt that contains the tracer, uh I asked time for some infos and ended up coding my version.
- JIT-Freezer - This program is used to suspend applications with a native layer in order to dump them (Only .NET)
- Venturi77CallHijacker - KoiVM,EazVM,AgileVM Patcher.
- Harmony - A library for patching, replacing and decorating .NET and Mono methods during runtime
- JitUnpacker-Framework - A jit hook and unpacker framework
- dnpatch - dnpatch is the ultimate library for all your .NET patching needs. It offers automated assembly patching, signature scanning and last but but not least bypassing of obfuscators by its ability to find methods in renamed/obfuscated types. Since the stars on GitHub exploded in a few days, dnpatch has been extended by a couple of projects. The most important one is dnpatch.deobfuscation which integrates de4dot directly into dnpatch. Also there is dnpatch.script, which gives you the ability to write patchers with pure JSON! The library itself uses dnlib (see next part).
-
- simple-deobfuscator - simple-deobfuscator
- BB-Deob - BeeByte Deobfuscator simply renames all the classes/fields/methods/params to readable strings that can be understood. AS I know BB Obfuscator only renames classes and etc, so it should be fully reversable at that point.
-
-
-
-
-
-
-
-
- CajunSpice - Strings & Proxy Fixer for Spices.net 5.22.29.3
-
- VMP.NET-Kill - This program allows you to bypass CRC checking, anti-debugging and anti-VM. Doesn't work when the app is packaged.
- VMUnprotect.Dumper - VMUnprotect.Dumper can dynamically untamper VMProtected Assembly.
-
-
- YanoDeobfuscator - YanoDeobfuscator is an open-source deobfuscator for YanoObfuscator
Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.