mdj Posted October 7, 2012 Share Posted October 7, 2012 (edited) Hi all my dear bro please see this crackme and solved it Link http://www.mediafire...j1q2l2ji6tezfme Edited October 7, 2012 by mdj Link to comment Share on other sites More sharing options...
MafiaOnMove Posted October 7, 2012 Share Posted October 7, 2012 Confuser v 1.x .... Failed to unpack from the tricks i know so far,... Somebody is talkin about unpacking it using WinHex on some forums but i cant access it (dunno why) Will be nice to see how to unpack Confuser MANUALLY ,..!! Anybody ??? Good crack me btw ,..!! Link to comment Share on other sites More sharing options...
0xd4d Posted October 7, 2012 Share Posted October 7, 2012 Confuser v 1.x .... It was protected with .NET Reactor followed by Confuser v1.9 (r76186+). Will be nice to see how to unpack Confuser MANUALLY ,..!! Anybody ??? It's using AntiTamperMem which just decrypts the encrypted methods when it starts. Dump it from memory and fix the PE and .NET headers afterwards. Then manually fix each proxy call, and manually decrypt (using your trusty binary calculator I assume) the resources, and finally manually decrypt the constants. If you're successful, you'll end up with a 356KB file. 1 Link to comment Share on other sites More sharing options...
mdj Posted October 8, 2012 Author Share Posted October 8, 2012 how can dump it it's also have anti dump Link to comment Share on other sites More sharing options...
kakamail Posted October 8, 2012 Share Posted October 8, 2012 Hi,It hard to talk about unpacking .net because as i know we don't have much info about this stuff. So while 0xd4d is here, i just want to know that is this easy to decrypt string, function which is obfuscated to "normal" ; just like xyzasbc => System.String.. kind of xenocode. Beside time and knowledge about dotnet programming, is IL required? I really want to decrypt myself but not much tut public on net. Link to comment Share on other sites More sharing options...
mamo Posted March 13, 2013 Share Posted March 13, 2013 plz upload it againin other place Link to comment Share on other sites More sharing options...
CodeExplorer Posted March 13, 2013 Share Posted March 13, 2013 Link to crack me:http://www.multiupload.nl/ZKZGNH2P86 Link to comment Share on other sites More sharing options...
CodeExplorer Posted March 13, 2013 Share Posted March 13, 2013 Unpacked and cracked file:http://www.multiupload.nl/Y6OCMHYR3T Link to comment Share on other sites More sharing options...
Hadits follower Posted March 13, 2013 Share Posted March 13, 2013 (edited) Nice reactor and confuser0xd4d sir wrote tut for confuser here is my unpacked Unpacked.7z - 1.8 MB ops i fogot to add the dump resourceUnpacked.7zresource.dll.rarUnpacked Resource Fixed.rar Edited March 13, 2013 by Death Link to comment Share on other sites More sharing options...
umair10 Posted February 8, 2014 Share Posted February 8, 2014 where is the link of that tutorial about unpacking confuser by SIR 0xd4d 1 Link to comment Share on other sites More sharing options...
CodeExplorer Posted February 8, 2014 Share Posted February 8, 2014 @umair10:Here:https://forum.tuts4you.com/topic/30207-net-decrypt-confuser-19-methods/ 1 Link to comment Share on other sites More sharing options...
umair10 Posted February 8, 2014 Share Posted February 8, 2014 Thank you very much Codecracker Brother.i am hobby cracker just learning to crack.i am not good in packed protections Link to comment Share on other sites More sharing options...
imran78639 Posted January 1, 2015 Share Posted January 1, 2015 sir i have did all thing you said but i have a file when i open it in .net reflector it says module contains multiple strings.plz give me solution urgent Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now