Jump to content
Tuts 4 You

UnPackMe (.NET)

The creation of new topics is disabled in these subforum categories.

Please create and post your new challenges in the appropriate subcategory of Downloads > Challenge of Reverse Engineering

A topic will then automagically be created and posted in these forums...

283 topics in this forum

  1. Leopar36

    ByUndefined Protector

    by Leopar36

    View File ByUndefined Protector ByUndefined Protector Anti Debugger Anti Dump Anti Tamper Anti Memory Anti ILDasm Resources Compress String Encrypt ControlFlow Virtualization Submitter Leopar36 Submitted 03/11/2025 Category UnPackMe (.NET)  

    Leopar36
    Last reply by Leopar36,
    • Like
  2. AarJee

    .NET Reactor v6.9 1 2

    by AarJee

    View File .NET Reactor v6.9 File packed with .NetReactor 6.9 -- All options Submitter AarJee Submitted 07/19/2023 Category UnPackMe (.NET)  

    14yoKID
    Last reply by 14yoKID,
    • Confused
    • Haha
    • Thanks
    • Like
  3. whoknows

    VMProtect v3.5.1

    by whoknows

    View File VMProtect v3.5.1 Hi all, This is a protected with the TRIAL edition... Mutation / Virtualization w/ the built in VMProtect license system. VMProtect Debugger detection - disabled. (apparently some C# lines added) VMProtect Trial limitation : user has to patch the file to run to his machine. There are 2 enter serial dialogs, once you solve the 1st, drives you to 2nd, when a valid serial entered exporting a file... If a valid serial entered on 1st form, is saved to license.diz file. Submitter whoknows Submitted …

    lovejoy226
    Last reply by lovejoy226,
    • Thanks
    • Like
  4. Leopar36

    ByUndefined Protector + Enigma

    by Leopar36

    View File ByUndefined Protector + Enigma ByUndefined Protector + Enigma Anti Debugger Anti Dump Anti Tamper Anti ILDasm Resources Compress String Encrypt ControlFlow Virtualization Purpose: You need to patch or unpack the correct key. Submitter Leopar36 Submitted 01/23/2025 Category UnPackMe (.NET)  

    mdj
    Last reply by mdj,
    • Like
  5. SaggingCoder

    Newbe UnPackMe1

    by SaggingCoder

    Difficulty : 7 (I think) Language : .NET Platform : Windows OS Version : Windows 7 and up Packer / Protector : eazFuscator 2018.2 Description : Hello, here I am again 👋. After last and first attempt in the KeygenMe-Section, I tried to put more attention on packing my code harder. I've tried to understand and mod the open source obfuscator ConfuserEx but never got the result I was anticipating. (All the unpackers unpacked them with ease no matter what I added/changed 🙄). So I shifted my attention towards the commercial obfuscators and oh boy the pricing on these.... I've tried NetGuard, Babel, NetReactor,.. and so on. On some of these there were still vir…

    CodeExplorer
    Last reply by CodeExplorer,
    • Like
  6. virtualguard

    VirtualGuard v1.0

    by virtualguard

    View File VirtualGuard v1.0 This file is protected by the first version of VirtualGuard. VirtualGuard is an obfuscator I develop that I am trying to receive some stress testing on I hope this VM makes people think at least a little bit; It's fairly close to 1:1, however I do believe I do some interesting things with comparisons and branching. Haven't seen it anywhere else. Let the record state this is not a "mod" of any other vm, so if you are interested in seeing some new stuff this is for you. This sample contains some fairly simple branch offset mutations, at first glance it may be a slight "wtf moment" (at least I hope), but …

    Coco420
    Last reply by Coco420,
    • Thanks
    • Like
  7. Mohd

    DNGuard HVM v3.953

    by Mohd

    View File DNGuard HVM v3.953 Try to unpack or alternatively provide the secret key, URL, Name and Address Protections used: DNGuard Enterprice HVM 3.953 Good luck. Submitter Mohd Submitted 09/08/2020 Category UnPackMe (.NET)  

    im_nop
    Last reply by im_nop,
    • Confused
    • Thanks
    • Like
  8. whoknows

    VMProtect Lite v3.8.7.2001

    by whoknows

    View File VMProtect Lite v3.8.7.2001 This methods protected with Ultra setting (mutation+virtualization) and complexity none ( for example if complexity setted 22% the output goes 1mb ). Either unpack it, either provide a valid license file. Submitter whoknows Submitted 08/27/2024 Category UnPackMe (.NET)  

    whoknows
    Last reply by whoknows,
    • Like
  9. VB56390

    dotNet Protector v6.0.7180

    by VB56390

    View File dotNet Protector v6.0.7180 Assemblies are obfuscated, then method bodies are replaced by corrupted code; de-compilation and disassembly tools like ILDASM can no more unassemble methods. Components Protection, this feature enables not only exe protection, but dll as well. ASP.Net is supported by dotNet Protector. Added anti-JIT. Submitter VB56390 Submitted 08/24/2024 Category UnPackMe (.NET)  

    VB56390
    Last reply by VB56390,
    • Like
  10. whoknows

    VMProtect v3.5.0.1213 1 2

    by whoknows

    View File VMProtect v3.5.0.1213 Try to unpack or alternatively provide a serial. If there is no solution provided by Saturday 11am (GMT+0) I will attach the same without debugger detection. Protections used: Debugger detection (User-mode + Kernel-mode) Ultra (Mutation + Virtualization) Submitter whoknows Submitted 08/06/2020 Category UnPackMe (.NET)  

    Bang1338
    Last reply by Bang1338,
    • Haha
    • Thanks
    • Like
  11. azufo

    Simple Calculator (Enigma 7.40 + ILProtector 2.0.22.14) 1 2

    by azufo

    View File Simple Calculator (Enigma 7.40 + ILProtector 2.0.22.14) This is a simple calculator.exe. Protected with ILProtector 2.0.22.14 and double layer Enigma 7.40. First layer on DLL, second layer on EXE and added DLL in Enigma Virtualbox. For skilled reversers this will not be a problem unpack this. Submitter azufo Submitted 01/10/2024 Category UnPackMe (.NET)  

    lovejoy226
    Last reply by lovejoy226,
    • Confused
    • Haha
    • Thanks
    • Like
  12. 0x59

    DNGuard HVM v3.9.6.2

    by 0x59

    View File DNGuard HVM v3.9.6.2 This file is protected using DNGuard HVM 3.9.6.2 Protections used : HVM Jit Challenge is to unpack and post details of methods used. Submitter 0x59 Submitted 01/03/2021 Category UnPackMe (.NET)  

    VB56390
    Last reply by VB56390,
    • Like
  13. Smoke

    [UnpackMe] Winlicense .Net x64 Unpackme

    by Smoke
    • 9 replies
    • 9.1k views

    Protections: Winlicense Demo 2.2.7.0 (x64) Compiler: .NET If you succed to unpack please make a tutorial. WinlicenseUnpackMe.NET.rar

    boot
    Last reply by boot,
    • Like
  14. BlackHat

    EAZFuscator .NET 2022.2 Max Preset (BlackHat) - Updated 04/06/22

    by BlackHat

    View File EAZFuscator .NET 2022.2 Max Preset (BlackHat) - Updated 04/06/22 Update 04-June 2022 Version 2022.2 Unpack Password - BH2022.2 Old 2022.1 Info - This unpackme is protected with latest version of EAZfuscator = https://www.gapotchenko.com/eazfuscator.net/features Password to unpack = EAZ2022 (I made a RAR file with password protection because I was unable to upload the unpackme directly. I was getting error due to false virus alarm) Your job is to unpack the file fully. Partial unpacking won't be accepted. Submitter BlackHat …

    lsj8924
    Last reply by lsj8924,
    • Thanks
    • Like
  15. whoknows

    AgileNET v6.6.0.4.2

    by whoknows

    View File AgileNET v6.6.0.4.2 AgileNET (code virtualization on 1 method only, no other protector features used) Submitter whoknows Submitted 11/12/2023 Category UnPackMe (.NET)  

    Hadits follower
    Last reply by Hadits follower,
    • Thanks
    • Like
  16. rhythm

    [UnpackMe].NET Reactor 4.9

    by rhythm

    This is UnpackMe, protected with .NET Reactor 4.9 All Protection Option. Unpack and Remove Nag MessageBox, please. UnpackMe.rar

    lovejoy226
    Last reply by lovejoy226,
    • Like
  17. Prab

    198 Protector V2 By Wadu

    by Prab
    • 6 replies
    • 13.3k views

    Language : C# Platforms : Windows Packer/obfuscator : 198 Protector V2 ( ConfuserEx Modded ) Description : Hi everyone, hope one of you friends can unpack the target and teach us how to unpack it. Virustotal : https://www.virustotal.com/gui/file/07638f4335a23fbb62e7c8e471398a8d556ca8ecbdea8395f4d55f76aebe3bce/detection Download : Unpackme.exe

    andrus_777123
    Last reply by andrus_777123,
    • Confused
    • Haha
    • Like
  18. BlackHat

    Black Hat Lucifer (Anti Dump + IL Protection + Enigma Protector)

    by BlackHat
    • 10 replies
    • 11.5k views

    Language : .NET Platform : Windows x32/x64 OS Version : All Packer / Protector : Anti Dump + IL Protection + Enigma Protector 3.50 Description : You need to unpack and change the Text. "Tuts4you Special Unpack Edition" Screenshot : UnpackMe by Lucifer.exe

    0x432
    Last reply by 0x432,
    • Confused
    • Thanks
    • Like
  19. DestroyerDarkNess

    NETBuilderInjection + VMP

    by DestroyerDarkNess
    • 1 reply
    • 11.8k views

    View File NETBuilderInjection + VMP I took my NETBuilderInjection and turned it into a Protector, but I don't know how secure it is. (For me, it's safe enough.) So I made this little program, The objectives are: [Unpackme] You should unpack it and get the cleanest code possible. [Crackme] In the textbox where the HWID is displayed you must modify the text and write something else in it. [Bypass] You will need to disable "Falcon Anticheat" from the executable. ---------------------------------------------------------------------------- Difficulty : Unknown Language Base : .NET Platform : Windows - .NET Framework 4…

    Hadits follower
    Last reply by Hadits follower,
  20. Guest Steve

    Beds Protector 4.5 1 2

    by Guest Steve

    Difficulty : medium Language : c# Platform : Windows x32/x64 OS Version : All Packer / Protector : BEDS 4,5 Description : unpack and tell how fast did you unack it and the way if possible Screenshot : ConsoleApp1.rar

    aladin61
    Last reply by aladin61,
    • Thanks
    • Like
  21. 0x59

    DNGuard HVM v3.97

    by 0x59
    • 10 replies
    • 19k views

    View File DNGuard HVM v3.97 This file is protected using DNGuard HVM 3.97. Protections used : HVM Jit Challenge is to unpack and post details of methods used. Submitter 0x59 Submitted 01/02/2021 Category UnPackMe (.NET)  

    BlueZ
    Last reply by BlueZ,
    • Thanks
    • Like
  22. despy3

    Themida v2.4.6.30

    by despy3

    View File Themida v2.4.6.30 This is a .NET executable with a Goland DLL packed with Themida. Try to unpack the executable, dump the bundled DLL then fix the DLL to make it work. Once completed detail the methods used and how you fixed the DLL. Submitter despy3 Submitted 12/17/2020 Category UnPackMe (.NET)  

    ArtZero
    Last reply by ArtZero,
    • Thanks
    • Like
  23. whoknows

    Eazfuscator v2021.1

    by whoknows

    View File Eazfuscator v2021.1 Unpack and/ or provide a valid serial. Archive password : superfrog Submitter whoknows Submitted 07/14/2021 Category UnPackMe (.NET)  

    sahteuser
    Last reply by sahteuser,
    • Thanks
    • Like
  24. cipsi

    ConfuserEx 1.6.0

    by cipsi

    View File ConfuserEx 1.6.0 Public key sample protected using ConfuserEx 1.6.0. https://github.com/mkaring/ConfuserEx/releases/tag/v1.6.0 Your challenge is to unpack and decompile the file. Submitter cipsi Submitted 02/04/2023 Category UnPackMe (.NET)  

    Abdelrahman Mahrous
    Last reply by Abdelrahman Mahrous,
    • Thanks
    • Like
  25. NightBullet

    ConfuserEx 1.0 Modified

    by NightBullet
    • 9 replies
    • 11.8k views

    Difficulty : 3,5 Language : C# Platform : Windows OS Version : All Packer / Protector : ConfuserEX 1.0 Modified Description : I am testing an anti de4dot and others ... If possible I would like to know the process you have done. Screenshot : Holly shit.exe

    Sakyamuni
    Last reply by Sakyamuni,
    • Like
×
×
  • Create New...