Software Security
Securing your software against reverse engineering...
111 topics in this forum
-
What is the purpose??
by null_endian- 1 reply
- 5k views
What exactly is the overall purpose of software protectors when used non-maliciously? For example, with a VM protection like Themida... What are its main goals? Is it simply trying to hide some "secret algorithm" that the developer made? Because of course it cannot hide its behavior.
-
NetProtector Beta Testers
by cawk- 0 replies
- 7.5k views
Hello, i have been working on a protection for quite some time now and its finally in a stage where i need more testers to test its stability and compatibility this will encrypt the methods body and will be converted back at runtime if you are able to test this for me please give me a pm each user will be granted 48 hours access to the obfuscator and 10 files protected in this time (to prevent abuse) the protection strength right now does not reflect what it will be soon. i just need to confirm compatibility on lots of files before i can improve it further regards
-
Dll box
by GautamGreat- 6 replies
- 9.3k views
Hi, I need some help in protector choosing. I need a function same as DLL box. I have a program with some dll I want to save my dll to dll box or something similar.
-
What are some ways to prevent data fishing?
by Bob Dole- 0 replies
- 5.4k views
Suppose you have a data file in your protected software (assume it's protected by something like VMP or Themida) that you don't want a user to tamper with. You conclude that you will embed information into this data file which your program will use, i.e., initiate constants using this data as some kind of initial value. However, this can be bypassed relatively easily if the cracker (a) knows you're doing this to a specific data file and (b) can debug your program to fish out these constants. Then simply replaces your data file and writes a loader to overwrite these constants with the fished data. Is there anything that can be done to make this even more difficult f…
-
Protect Android APP
by djpolgio- 1 reply
- 5k views
Is it possible ? There's a valid commercial solution ? or not yet ? Thanks S
-
VMProtect vs Themida 1 2
by iNoob- 25 replies
- 54.2k views
Hi, I would like to protect a small Win32 file and deciding which protection software to use. Would anyone here be able to provide insight on the difficulty of unpacking the current version of Themida (with multiple of the virtual machines) and VMProtect? In general, which of the two is more difficult to unpack? Thank you
-
- 5 replies
- 10.1k views
Hi, I am looking for a packing/protector software for my MMORPG. I have tested Themida, the protection is great but performance dropped too much with the VM. I am now considering protecting my game client with ASPack, but I am concerned about it being unpacked too easily. Is there any packing/protecting software someone would recommend me over ASPack? What could one say about the difficulty of unpacking the newest version of ASPack? Any assistance would be much appreciated!
-
- 4 replies
- 7.5k views
Hi, I'm new to this forum and I dont know anything about reverse engineering. I have a coder currently making me a c++ program that I want protected. I saw a previous thread which asked what is better out of themida and vmprotect. I dont know why he would limit to these 2 only as there seems to be so much out there. So much question is what software will best protect my c++ code at the moment from reverse engineering. Note i understand from what i have read nothing is 100% protected but what will slow someone down the most? So far i have looked into Themida/ Code Virtualizer ,VM Protect , Obsidium but I'm not qualified to make a call on any of them or something…
-
How to mod ConfuserEx?
by PickAna- 0 replies
- 5.5k views
Hello; Currently devlopping a bot for a game and I need a somewhat good protection (at least against newbies) Can anyone guide me to something helpful to mod ConfuserEx? What should I modify in the code exactly? I know everything can be deobfuscated with time, but I want to at least give them a hard time doing so ^^ Thank you.
-
Research in (Virtualization-) Code Obfuscators?
by miraculix- 5 replies
- 11.7k views
Hi, I want to write my Bachelor's thesis on Code obfuscators in DRM. The plan was for me to describe different protection features and then implement some of them by writing my own little code obfuscator. However, now the uber-boss of the department intervened because he thinks the topic lacks an adequate "research question". That is, the thesis has to answer/solve a concrete problem or question, not just reimplement existing techniques. He might be right, I guess. But I cant think of a good and appropriate "research question" in this way. Can anyone imagine a good research question in that regard I might cover? [If this post is in the wron…
-
- 9 replies
- 14.2k views
Hello, I'm trying to change the protection flag of an address in memory, it is set to EXECUTE_READ (probably) and I'm trying to change it to EXECUTE_READWRITE to run my hooked function , I've injected a dll inside the process and created a new thread then I'm trying to use VirtualProtect to change it, but VirtualProtect keeps failing and the protection doesn't change .... it's like it has been disabled (but only on certaing pages, since If I try to VirtualAlloc a new page, I'm able to change to modify the protections of it) :/, I've tried to check if the VirtualProtect has been hooked but it's not, how is it possible that they made the VirtualProtect to not work wit…
-
NtGlobalFlag
by Aldhard Oswine- 1 reply
- 6.4k views
I'm learning Anti-RE techniques and I have simple problem with NtGlobalFlag void PEBglobalflags() { BOOL f = FALSE; __asm { xor eax, eax mov eax, fs:[0x30] movzx eax, [eax+0x68] mov f, eax } if (f) { MessageBox(nullptr, L"Dbg", L"", 0); exit(1); } } Using this method can not detect dbgr. eax is always 0, instead of 0x70. Image: https://ibb.co/b89vYv Windows 10 - 86_64, application x86, MSVC 2017,
-
Build Modded Confuser Ex
by Jessica- 7 replies
- 14.1k views
I need best modded confuser ex to protect My application which is build in C#. i am ready to pay for this only. if you have any other suggestions then also tell me. Thanks
-
- 4 replies
- 8k views
Hi, i'm searching for someone good in protectors. I have a MMORPG game and i want to protect codes, to block hacks etc.. All hacks it's injected via dll injection etc.. I will exlain more in private. I can pay for this, no problem. Please move this topic intro a good section;
-
best obfuscator / packer
by ls-1- 2 replies
- 11.6k views
whats is best packer / obfuscator for .net exe assembly
-
Spoon Protector
by Gitta98- 4 replies
- 6.8k views
Hello guys , Sorry for newbie question ! Is there any way to prevent turbo virtual application studio( spoon) files from being extracted or making it harder to extract ? like protectors or .... Thanks .
-
- 9 replies
- 10.4k views
Hello Friends i want your feedback which is the best obfuscator to prevent .net application again reverse engineering. Thanks
-
Scramble EXE Code?
by omar911- 3 replies
- 6.1k views
i have made a few apps in delphi and visual C++ and have used Crypter software but they flag up as virus's and im looking for a tool that can scramble the exe code before i pack it. Any help or advice would be good and i will be grateful if anyone on here can help me in any way. THANK YOU
-
[Help] DotNetPatcher 4.4.2
by Modify- 8 replies
- 9.5k views
Please Help me DotNetPatcher 4.4.2 not work for me after protect my application, run application force close. My.7z
-
- 0 replies
- 4.8k views
I'm trying to implement a Native Runtime protection scheme just like how some protectors does, (keep in mind [Native Runtime != Native Wrapper]) I found it interesting so I wanted to do something similar to that just because, and because of learning purposes, I think this little project can open me doors for learning what I want to learn which is be more fluent in C# or at least I hope so. Basically what I would like to apply is the same principles, I know they take some measures that are kinda obvious and prone to reverse for example Jitted methods, MITM Jit Attacks, etc, etc. However, like I said, I just want to do it. I was looking i…
-
AntiDebugging in Delphi
by GautamGreat- 7 replies
- 8.6k views
Hey. I need some help. I wanna program a application which is fully protected from RCE. Means if it will detect any PE tool or debugger it will self destroy.
-
Android App Protection
by ismart- 3 replies
- 6.7k views
Hello Friends I have one android application and I want to protect it against reverse engineering, So please suggest me the right protection which protect my android application. Thanks
-
Create a simple packer
by 0ne- 5 replies
- 9.4k views
I want to write a simple Packer, but before I start writing, I was planning the design of the Packer. The design is as following picture: http://imgur.com/qsKI7ty Step one, encrypt the code segment and data segment. Step two, add a new segment, which will be the Stub. Step Three, Change the OEP.to stub EP. The first step and third step are easy, but the second step is not simple. The Stub contains function calls (eg VirtualProtect). 1)From what I realized every external function should be in IAT, I have to add the function to the IAT? Is there any other method to call external function, without get in trouble? I saw several articles on this subject,…
-
-
by NightBaron- 2 replies
- 6.7k views
i want to protect resource (anti dump) but i don't know how to protect it ok i use confuserex full option confuserex can protect dump in exe files but my resource don't protected can you help me ? # sorry i'm bad english thanks..
-
Obfuscator
by cawk- 11 replies
- 9.6k views
Hello i have a program that i am going to need to obfuscate when i have completed it, i was wondering what is the best free obfuscator that has no public tools to deobfuscate and yes i know that nothing is 100% protected but it will keep majority of people out who will just drop it into automatic tools thanks in advance