Software Security
Securing your software against reverse engineering...
124 topics in this forum
-
The best paid/free obfuscator for C#
by szczurekPROS- 14 replies
- 13.4k views
Hello. I'm looking for really good and strong paid or free obfuscator. Can you give me names/links please? Thank you
-
- 2 replies
- 5.5k views
Hey i was testing some simple program with obfuscations could you guys tell me if its easly reversable ?? ( i tried myself but im not that good as you guys ) de4dot breaks on this application / and dnSPy not displaying anything important i will include 2 binaries first one is obfuscated and clean as refference how it should look like both of them are c# programs what does the application? it starts console application grabs some hardware id's and creates an unique hardware id and displaying it on screen then waiting on key press (everything from code can be found in github/stack GetHWID_clean.exe GetHWID_obfuscated.exe
-
Protection for Native Driver / Applicaition
by KoMaR1911- 10 replies
- 17.8k views
Hello What do you think about TheMida / VMProtect / Obsidium? i need to protect my driver and application - i need good performance and virtualization i saw some opinions about VMProtect and Themida some people said VMProtect is not good (is not hard to devirtualize) and themida is better in virtualization than vmprotect now i want to pick Obsidium but i need some informations about their virtualization Obsidium vs TheMida vs VMProtect? Thanks
-
Lycosidae - Modern Anti Debug
by Leila.Morar48- 5 replies
- 5.6k views
https://github.com/lurumdare/Lycosidae Bypass ScyllaHide Features - Import no leak - Strings no leak
-
.Net C# Protector?
by surajj- 1 reply
- 6k views
Dear Can any you please guide me or sugguest or provide me any best packer option for .net exe, We can talk about it, who have best experience about security.
-
Best Protection for .net Exe
by Rosan- 15 replies
- 11.7k views
Which Obfucastor is better Appfuscator, ConfuserEx, Engima, .net Reactor, Themida.
-
protector - best virtual machine
by JQueue- 1 reply
- 5.9k views
when using themida which of the virtual machines would give the best protection? in code that is not run often i would guess the ones with the highest complexity would be best.. but of those is there any that is harder to crack than others?
-
Few thoughts on .NET obfuscators
by cawk- 12 replies
- 21.6k views
Hello, so I keep getting asked what’s the best obfuscators around so I am posting this so I don’t keep repeating it. I have decided to give my opinion on all obfuscators if I am missing any let me know If you are a developer of any of these obfuscators don’t take what I say as an insult use it to improve DNGuard - an obfuscator I used to say was Chinese crap however I’ve recently spent some time analysing this and can say that the HVM technology is very strong and makes unpacking a lot harder. However when not using the HVM setting it makes unpacking extremely simple with jit dumping and can use codecrackers unpacker for this. Compatibility on this obfuscator is i…
-
Themida configuration
by KDN- 1 reply
- 6.9k views
HI, can anyone tell me what the strongest setup for Themida protector is? If I untick automatic vm handling I can choose which vm's to use, I heard Dolphin is the newest, but shark32 and eagle32 have the highest complexity, does that make them better to use? my program is very simple so I don't care about speed reduction. I just want the hardest to RE. thanks
-
.thumb.png.8677b80e31518a8f1e34a4081d08904d.png)
.NET Obfuscation/Protection
by 3dsboy08- 11 replies
- 20.8k views
As of now, most .NET obfuscators are regarded as nothing more then a joke by tools such as 'de4dot'/similar. What tools are currently available that hinder reversing for .NET? There seems to be virtually unlimited amounts of obfuscators available for purchase/download, but which ones are actually worthwhile (and worth my money)? Thanks.
-
Protecting assembler code
by Guest- 6 replies
- 7.5k views
Hi, I'm looking for a software which can protect assembler code (not compiled binary). It should meet the following requirements: - Nasm or masm syntax - 32 and 64bit assembly - Add junk code - Add fake jumps - Preferably also mutate original code The target goal is to make the code harder to read and understand by human eyes. Nothing else needed. It can be paid or free software. Any recommendations?
-
C++ application protector
by Guest Steve- 10 replies
- 16.3k views
Hi all, What is the best protector for c++ applications in your opinion? I was using vmp 3.0.9, but I guess Themida is better... What do you think guys?
-
Request - Obfuscator
by Lexity- 11 replies
- 17.7k views
Can somebody give me a obfuscator to use for my program? No confuserex please. I literally searchin lmfao. plz reply with obfuscator dl
-
What is the purpose??
by null_endian- 1 reply
- 6k views
What exactly is the overall purpose of software protectors when used non-maliciously? For example, with a VM protection like Themida... What are its main goals? Is it simply trying to hide some "secret algorithm" that the developer made? Because of course it cannot hide its behavior.
-
NetProtector Beta Testers
by cawk- 0 replies
- 9.1k views
Hello, i have been working on a protection for quite some time now and its finally in a stage where i need more testers to test its stability and compatibility this will encrypt the methods body and will be converted back at runtime if you are able to test this for me please give me a pm each user will be granted 48 hours access to the obfuscator and 10 files protected in this time (to prevent abuse) the protection strength right now does not reflect what it will be soon. i just need to confirm compatibility on lots of files before i can improve it further regards
-
Dll box
by GautamGreat- 6 replies
- 10.6k views
Hi, I need some help in protector choosing. I need a function same as DLL box. I have a program with some dll I want to save my dll to dll box or something similar.
-
What are some ways to prevent data fishing?
by Bob Dole- 0 replies
- 6.3k views
Suppose you have a data file in your protected software (assume it's protected by something like VMP or Themida) that you don't want a user to tamper with. You conclude that you will embed information into this data file which your program will use, i.e., initiate constants using this data as some kind of initial value. However, this can be bypassed relatively easily if the cracker (a) knows you're doing this to a specific data file and (b) can debug your program to fish out these constants. Then simply replaces your data file and writes a loader to overwrite these constants with the fished data. Is there anything that can be done to make this even more difficult f…
-
Protect Android APP
by djpolgio- 1 reply
- 5.9k views
Is it possible ? There's a valid commercial solution ? or not yet ? Thanks S
-
VMProtect vs Themida 1 2
by iNoob- 1 follower
- 25 replies
- 69.4k views
Hi, I would like to protect a small Win32 file and deciding which protection software to use. Would anyone here be able to provide insight on the difficulty of unpacking the current version of Themida (with multiple of the virtual machines) and VMProtect? In general, which of the two is more difficult to unpack? Thank you
-
- 5 replies
- 11.2k views
Hi, I am looking for a packing/protector software for my MMORPG. I have tested Themida, the protection is great but performance dropped too much with the VM. I am now considering protecting my game client with ASPack, but I am concerned about it being unpacked too easily. Is there any packing/protecting software someone would recommend me over ASPack? What could one say about the difficulty of unpacking the newest version of ASPack? Any assistance would be much appreciated!
-
- 4 replies
- 8.9k views
Hi, I'm new to this forum and I dont know anything about reverse engineering. I have a coder currently making me a c++ program that I want protected. I saw a previous thread which asked what is better out of themida and vmprotect. I dont know why he would limit to these 2 only as there seems to be so much out there. So much question is what software will best protect my c++ code at the moment from reverse engineering. Note i understand from what i have read nothing is 100% protected but what will slow someone down the most? So far i have looked into Themida/ Code Virtualizer ,VM Protect , Obsidium but I'm not qualified to make a call on any of them or something…
-
How to mod ConfuserEx?
by PickAna- 0 replies
- 6.6k views
Hello; Currently devlopping a bot for a game and I need a somewhat good protection (at least against newbies) Can anyone guide me to something helpful to mod ConfuserEx? What should I modify in the code exactly? I know everything can be deobfuscated with time, but I want to at least give them a hard time doing so ^^ Thank you.
-
Research in (Virtualization-) Code Obfuscators?
by miraculix- 5 replies
- 12.8k views
Hi, I want to write my Bachelor's thesis on Code obfuscators in DRM. The plan was for me to describe different protection features and then implement some of them by writing my own little code obfuscator. However, now the uber-boss of the department intervened because he thinks the topic lacks an adequate "research question". That is, the thesis has to answer/solve a concrete problem or question, not just reimplement existing techniques. He might be right, I guess. But I cant think of a good and appropriate "research question" in this way. Can anyone imagine a good research question in that regard I might cover? [If this post is in the wron…
-
- 9 replies
- 16.1k views
Hello, I'm trying to change the protection flag of an address in memory, it is set to EXECUTE_READ (probably) and I'm trying to change it to EXECUTE_READWRITE to run my hooked function , I've injected a dll inside the process and created a new thread then I'm trying to use VirtualProtect to change it, but VirtualProtect keeps failing and the protection doesn't change .... it's like it has been disabled (but only on certaing pages, since If I try to VirtualAlloc a new page, I'm able to change to modify the protections of it) :/, I've tried to check if the VirtualProtect has been hooked but it's not, how is it possible that they made the VirtualProtect to not work wit…
-
NtGlobalFlag
by Aldhard Oswine- 1 reply
- 8.5k views
I'm learning Anti-RE techniques and I have simple problem with NtGlobalFlag void PEBglobalflags() { BOOL f = FALSE; __asm { xor eax, eax mov eax, fs:[0x30] movzx eax, [eax+0x68] mov f, eax } if (f) { MessageBox(nullptr, L"Dbg", L"", 0); exit(1); } } Using this method can not detect dbgr. eax is always 0, instead of 0x70. Image: https://ibb.co/b89vYv Windows 10 - 86_64, application x86, MSVC 2017,
