Pinned Repositories
.NET-Deobfuscator-
Lists of .NET Deobfuscator and Unpacker (Open Source)
.NET-Virtualized-Apps-Patcher
Works with KoiVM/EazVM/AgileVM
.Net-Vmprotect-Tools
.NetReactorCfCleaner
A control flow cleaner for .net reactor 6x
.NetReactorStringDecryptor
A string decryptor for .net reactor 6x
Agile.NET-Deobfuscator-Latest
A newly programmed tool that will deobfuscate Agile.Net Obfuscation.
DeMutation
Updated VMP Demutator from sn0w
NetReactorSlayer
A deobfuscator for Eziriz .NET Reactor
VMP-Demutator
Demutator for VMP Mutations
VMUnprotect
VMUnprotect can dynamically log and manipulate calls from virtualized methods by VMProtect.
xlfj5211's Repositories
xlfj5211/.NetReactorCfCleaner
A control flow cleaner for .net reactor 6x
xlfj5211/.NetReactorStringDecryptor
A string decryptor for .net reactor 6x
xlfj5211/de4dotFixed
de4dot fixed to handle "anti-de4dot" interface adder
xlfj5211/dnpatch
.NET Patcher library using dnlib
xlfj5211/v2ray
最好用的 V2Ray 一键安装脚本 & 管理脚本
xlfj5211/.NETReactor_6.3.0.0_Only_Strings
Example deobfuscate .NET Reactor 6.3.0.0 strings(ONLY STRINGS)
xlfj5211/Agile.NET-Deobfuscator
Deobfuscates Agile.NET controlflow, strings, and proxy delegates. Their is a problem with the delegate fixer, as it does not work properly on entrypoints/constructors. Either then that, please let me know for new updates or any other problems. Throughout the full source on every line it contains comments so you can easily understand the process behind it. Enjoy!
xlfj5211/AHOHNMProtector-Constant-Decryptor
Constant decryptor for another ConfuserEx Mod named Аноним Protector V1.1
xlfj5211/CawkVM-Devirt
xlfj5211/CodingAStringDecrypter-
In this project i made using dnlib, i coded very simple code for educational purposes in which decrypt strings protected by YanoObfuscator. It also includes comments for beginners for each line of process
xlfj5211/confuserex-unpacker-custom
xlfj5211/ConfuserExTools
ConfuserEx unpacking tools
xlfj5211/DInvoke
Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.
xlfj5211/dotnetbook
.NET Platform Architecture book (English, Chinese, Russian)
xlfj5211/DotNetDetour
DotNetDetour is a software package for monitoring and instrumenting API calls
xlfj5211/DotNetUniversalPatcher
An .NET Patcher written in C# that implements the dnlib and dnpatch libraries.
xlfj5211/EazFixer
A deobfuscation tool for Eazfuscator.
xlfj5211/HookDetector.NET
HookDetector.NET is a .NET Library to detect hooks in API functions
xlfj5211/ILProtectorUnpacker
xlfj5211/ILPUnpacker
Different approach on unpacking ILProtector (Latest)
xlfj5211/jitm
JITM is an automated tool to bypass the JIT Hooking protection on a .NET sample.
xlfj5211/malwoverview
Malwoverview is a first response tool to perform an initial and quick triage in a directory containing malware samples, specific malware sample, suspect URL and domains. Additionally, it allows to download and send samples to main online sandboxes.
xlfj5211/netext
WinDbg extension for data mining managed heap. It also includes commands to list http request, wcf services, WIF tokens among others
xlfj5211/NoFuserEx
Free deobfuscator for ConfuserEx.
xlfj5211/PSTrace
Trace ScriptBlock execution for powershell v2
xlfj5211/Scripts
A collection of x64dbg scripts. Feel free to submit a pull request to add your script.
xlfj5211/SharpDllLoaderDLL-
A simple C# executable that invokes an arbitrary method of an arbitrary C# DLL
xlfj5211/simple-deobfuscator
xlfj5211/TinyJitHook
Example JIT Hook for .NET FW/Core.
xlfj5211/Unscrambler-
Universal unpacker and fixer for a number of modded ConfuserEx protections