Jump to content
Tuts 4 You

UnPackMe (.NET)

The creation of new topics is disabled in these subforum categories.

Please create and post your new challenges in the appropriate subcategory of Downloads > Challenge of Reverse Engineering

A topic will then automagically be created and posted in these forums...

281 topics in this forum

  1. whoknows

    VMProtect v3.5.1

    by whoknows

    View File VMProtect v3.5.1 Hi all, This is a protected with the TRIAL edition... Mutation / Virtualization w/ the built in VMProtect license system. VMProtect Debugger detection - disabled. (apparently some C# lines added) VMProtect Trial limitation : user has to patch the file to run to his machine. There are 2 enter serial dialogs, once you solve the 1st, drives you to 2nd, when a valid serial entered exporting a file... If a valid serial entered on 1st form, is saved to license.diz file. Submitter whoknows Submitted …

    whoknows
    Last reply by whoknows,
    • Thanks
    • Like
  2. Mohd

    DNGuard HVM v3.953

    by Mohd

    View File DNGuard HVM v3.953 Try to unpack or alternatively provide the secret key, URL, Name and Address Protections used: DNGuard Enterprice HVM 3.953 Good luck. Submitter Mohd Submitted 09/08/2020 Category UnPackMe (.NET)  

    im_nop
    Last reply by im_nop,
    • Confused
    • Thanks
    • Like
  3. whoknows

    VMProtect Lite v3.8.7.2001

    by whoknows

    View File VMProtect Lite v3.8.7.2001 This methods protected with Ultra setting (mutation+virtualization) and complexity none ( for example if complexity setted 22% the output goes 1mb ). Either unpack it, either provide a valid license file. Submitter whoknows Submitted 08/27/2024 Category UnPackMe (.NET)  

    whoknows
    Last reply by whoknows,
    • Like
  4. VB56390

    dotNet Protector v6.0.7180

    by VB56390

    View File dotNet Protector v6.0.7180 Assemblies are obfuscated, then method bodies are replaced by corrupted code; de-compilation and disassembly tools like ILDASM can no more unassemble methods. Components Protection, this feature enables not only exe protection, but dll as well. ASP.Net is supported by dotNet Protector. Added anti-JIT. Submitter VB56390 Submitted 08/24/2024 Category UnPackMe (.NET)  

    VB56390
    Last reply by VB56390,
    • Like
  5. whoknows

    VMProtect v3.5.0.1213 1 2

    by whoknows

    View File VMProtect v3.5.0.1213 Try to unpack or alternatively provide a serial. If there is no solution provided by Saturday 11am (GMT+0) I will attach the same without debugger detection. Protections used: Debugger detection (User-mode + Kernel-mode) Ultra (Mutation + Virtualization) Submitter whoknows Submitted 08/06/2020 Category UnPackMe (.NET)  

    Bang1338
    Last reply by Bang1338,
    • Haha
    • Thanks
    • Like
  6. azufo

    Simple Calculator (Enigma 7.40 + ILProtector 2.0.22.14) 1 2

    by azufo

    View File Simple Calculator (Enigma 7.40 + ILProtector 2.0.22.14) This is a simple calculator.exe. Protected with ILProtector 2.0.22.14 and double layer Enigma 7.40. First layer on DLL, second layer on EXE and added DLL in Enigma Virtualbox. For skilled reversers this will not be a problem unpack this. Submitter azufo Submitted 01/10/2024 Category UnPackMe (.NET)  

    Sean Park - Lovejoy
    Last reply by Sean Park - Lovejoy,
    • Confused
    • Haha
    • Thanks
    • Like
  7. 0x59

    DNGuard HVM v3.9.6.2

    by 0x59

    View File DNGuard HVM v3.9.6.2 This file is protected using DNGuard HVM 3.9.6.2 Protections used : HVM Jit Challenge is to unpack and post details of methods used. Submitter 0x59 Submitted 01/03/2021 Category UnPackMe (.NET)  

    VB56390
    Last reply by VB56390,
    • Like
  8. AarJee

    .NET Reactor v6.9

    by AarJee

    View File .NET Reactor v6.9 File packed with .NetReactor 6.9 -- All options Submitter AarJee Submitted 07/19/2023 Category UnPackMe (.NET)  

    newBeee
    Last reply by newBeee,
    • Confused
    • Thanks
    • Like
  9. Smoke

    [UnpackMe] Winlicense .Net x64 Unpackme

    by Smoke
    • 9 replies
    • 8.8k views

    Protections: Winlicense Demo 2.2.7.0 (x64) Compiler: .NET If you succed to unpack please make a tutorial. WinlicenseUnpackMe.NET.rar

    boot
    Last reply by boot,
    • Like
  10. BlackHat

    EAZFuscator .NET 2022.2 Max Preset (BlackHat) - Updated 04/06/22

    by BlackHat

    View File EAZFuscator .NET 2022.2 Max Preset (BlackHat) - Updated 04/06/22 Update 04-June 2022 Version 2022.2 Unpack Password - BH2022.2 Old 2022.1 Info - This unpackme is protected with latest version of EAZfuscator = https://www.gapotchenko.com/eazfuscator.net/features Password to unpack = EAZ2022 (I made a RAR file with password protection because I was unable to upload the unpackme directly. I was getting error due to false virus alarm) Your job is to unpack the file fully. Partial unpacking won't be accepted. Submitter BlackHat …

    lsj8924
    Last reply by lsj8924,
    • Thanks
    • Like
  11. whoknows

    AgileNET v6.6.0.4.2

    by whoknows

    View File AgileNET v6.6.0.4.2 AgileNET (code virtualization on 1 method only, no other protector features used) Submitter whoknows Submitted 11/12/2023 Category UnPackMe (.NET)  

    Hadits follower
    Last reply by Hadits follower,
    • Thanks
    • Like
  12. virtualguard

    VirtualGuard v1.0

    by virtualguard

    View File VirtualGuard v1.0 This file is protected by the first version of VirtualGuard. VirtualGuard is an obfuscator I develop that I am trying to receive some stress testing on I hope this VM makes people think at least a little bit; It's fairly close to 1:1, however I do believe I do some interesting things with comparisons and branching. Haven't seen it anywhere else. Let the record state this is not a "mod" of any other vm, so if you are interested in seeing some new stuff this is for you. This sample contains some fairly simple branch offset mutations, at first glance it may be a slight "wtf moment" (at least I hope), but …

    azufo
    Last reply by azufo,
    • Thanks
    • Like
  13. rhythm

    [UnpackMe].NET Reactor 4.9

    by rhythm

    This is UnpackMe, protected with .NET Reactor 4.9 All Protection Option. Unpack and Remove Nag MessageBox, please. UnpackMe.rar

    Sean Park - Lovejoy
    Last reply by Sean Park - Lovejoy,
    • Like
  14. Prab

    198 Protector V2 By Wadu

    by Prab
    • 6 replies
    • 13k views

    Language : C# Platforms : Windows Packer/obfuscator : 198 Protector V2 ( ConfuserEx Modded ) Description : Hi everyone, hope one of you friends can unpack the target and teach us how to unpack it. Virustotal : https://www.virustotal.com/gui/file/07638f4335a23fbb62e7c8e471398a8d556ca8ecbdea8395f4d55f76aebe3bce/detection Download : Unpackme.exe

    andrus_777123
    Last reply by andrus_777123,
    • Confused
    • Haha
    • Like
  15. BlackHat

    Black Hat Lucifer (Anti Dump + IL Protection + Enigma Protector)

    by BlackHat
    • 10 replies
    • 11k views

    Language : .NET Platform : Windows x32/x64 OS Version : All Packer / Protector : Anti Dump + IL Protection + Enigma Protector 3.50 Description : You need to unpack and change the Text. "Tuts4you Special Unpack Edition" Screenshot : UnpackMe by Lucifer.exe

    0x432
    Last reply by 0x432,
    • Confused
    • Thanks
    • Like
  16. DestroyerDarkNess

    NETBuilderInjection + VMP

    by DestroyerDarkNess
    • 1 reply
    • 11.5k views

    View File NETBuilderInjection + VMP I took my NETBuilderInjection and turned it into a Protector, but I don't know how secure it is. (For me, it's safe enough.) So I made this little program, The objectives are: [Unpackme] You should unpack it and get the cleanest code possible. [Crackme] In the textbox where the HWID is displayed you must modify the text and write something else in it. [Bypass] You will need to disable "Falcon Anticheat" from the executable. ---------------------------------------------------------------------------- Difficulty : Unknown Language Base : .NET Platform : Windows - .NET Framework 4…

    Hadits follower
    Last reply by Hadits follower,
  17. Guest Steve

    Beds Protector 4.5 1 2

    by Guest Steve

    Difficulty : medium Language : c# Platform : Windows x32/x64 OS Version : All Packer / Protector : BEDS 4,5 Description : unpack and tell how fast did you unack it and the way if possible Screenshot : ConsoleApp1.rar

    aladin61
    Last reply by aladin61,
    • Thanks
    • Like
  18. 0x59

    DNGuard HVM v3.97

    by 0x59
    • 10 replies
    • 18.4k views

    View File DNGuard HVM v3.97 This file is protected using DNGuard HVM 3.97. Protections used : HVM Jit Challenge is to unpack and post details of methods used. Submitter 0x59 Submitted 01/02/2021 Category UnPackMe (.NET)  

    BlueZ
    Last reply by BlueZ,
    • Thanks
    • Like
  19. despy3

    Themida v2.4.6.30

    by despy3

    View File Themida v2.4.6.30 This is a .NET executable with a Goland DLL packed with Themida. Try to unpack the executable, dump the bundled DLL then fix the DLL to make it work. Once completed detail the methods used and how you fixed the DLL. Submitter despy3 Submitted 12/17/2020 Category UnPackMe (.NET)  

    ArtZero
    Last reply by ArtZero,
    • Thanks
    • Like
  20. whoknows

    Eazfuscator v2021.1

    by whoknows

    View File Eazfuscator v2021.1 Unpack and/ or provide a valid serial. Archive password : superfrog Submitter whoknows Submitted 07/14/2021 Category UnPackMe (.NET)  

    sahteuser
    Last reply by sahteuser,
    • Thanks
    • Like
  21. cipsi

    ConfuserEx 1.6.0

    by cipsi

    View File ConfuserEx 1.6.0 Public key sample protected using ConfuserEx 1.6.0. https://github.com/mkaring/ConfuserEx/releases/tag/v1.6.0 Your challenge is to unpack and decompile the file. Submitter cipsi Submitted 02/04/2023 Category UnPackMe (.NET)  

    Abdelrahman Mahrous
    Last reply by Abdelrahman Mahrous,
    • Thanks
    • Like
  22. NightBullet

    ConfuserEx 1.0 Modified

    by NightBullet
    • 9 replies
    • 11.5k views

    Difficulty : 3,5 Language : C# Platform : Windows OS Version : All Packer / Protector : ConfuserEX 1.0 Modified Description : I am testing an anti de4dot and others ... If possible I would like to know the process you have done. Screenshot : Holly shit.exe

    Sakyamuni
    Last reply by Sakyamuni,
    • Like
  23. Babyhamsta

    Dark Protector Mod

    by Babyhamsta

    Language : .NET Platform : Windows [x32/x64] OS Version : Windows 10 Packer / Protector : ConfuserEX Custom [Dark Protector Mod] Description : Unpack the exe to find the key! If you would give a brief explanation on how you unpacked it. The exe has max protections and will pop up a messagebox once you enter the correct password. Protections Added to this Unpack Exe: Junk Code, Anti De4Dot, Anti Debug, Anti Dump, Anti ILDasm, Anti Tamper, Calli Protection, Constant Dis, Constants, Control Flow, Hide Methods, Invalid Metadata, MD5 Checksum, Mid Ref Proxy, Mutate Constants, Mutations, Module Flood, Reference Proxy, Renamer, Resources, and Stack Underflow…

    X0rby
    Last reply by X0rby,
    • Haha
    • Like
  24. whoknows

    VMProtect v3.6

    by whoknows

    View File VMProtect v3.6 Hi all, This is a protected with the RETAIL edition... Mutation / Virtualization w/ the built in VMProtect license system. There are 2 enter serial dialogs, once you solve the 1st, drives you to 2nd, when a valid serial entered exporting a file... If a valid serial entered on 1st form, is saved to license.diz file. Submitter whoknows Submitted 06/24/2022 Category UnPackMe (.NET)  

    sahteuser
    Last reply by sahteuser,
    • Confused
  25. weston2337

    FujiFuscator

    by weston2337
    • 14 replies
    • 20.9k views

    Difficulty : (3-4 Maybe?) Language : (C# .NET) Platform : (Windows) OS Version : (Windows 10) Packer / Protector : (FujiFuscator) Description : Please give me a detailed tutorial on how you unpacked this. Screenshot : UnPackMe.exe

    nausixkiz
    Last reply by nausixkiz,
    • Thanks
    • Like
×
×
  • Create New...