Hey mate,

Please suggest me a best .net obfuscator in market which hard to decompile the source code.

Thanks

VMP for .net of course
then consider looking into EazFuscator

both have very strong features like virtualization as well as homomorhic encryption

Hey, if you're still looking for a .NET obfuscator, you might want to try Rika .NET.

It’s simple to use, works with modern .NET apps, and includes a solid virtualization feature that isn’t common in most of the obfuscators.

I’m actively working on it and always open to ideas or feedback.

You can find more info and join the community here:
Website

The problem with online obfuscator is you have to upload the source and pack it, i can’t see that working out well as most won’t want to put unprotected apps on a unknown system, it’s a serious security risk for an unknown 

VMProtect is well known and 1 of the most tested and I know there are private apps that defeat it easily, devirtualisation as well, take vmp 3.8 it had a memory leak and a couple of other problems, some of which were fixed in around v3.92 but not all

 

1 hour ago, H1TC43R said:

The problem with online obfuscator is you have to upload the source and pack it, i can’t see that working out well as most won’t want to put unprotected apps on a unknown system, it’s a serious security risk for an unknown 

VMProtect is well known and 1 of the most tested and I know there are private apps that defeat it easily, devirtualisation as well, take vmp 3.8 it had a memory leak and a couple of other problems, some of which were fixed in around v3.92 but not all

 

VMProtect 3.9x isn’t stable at all it’s extremely slow and way buggier than older versions.

Most other .NET obfuscators are pretty well-known, and there are tons of public and private tools to devirtualize/unpack them. Just using one because it’s popular means your software will keep getting targeted by reverse engineers.

Plus, you don’t have to use a remote system 'cause there are other ways to grab people's files if you actually aim that and have such intentions.

The only way to fully ease security worries is to have an obfuscator that works completely offline, no internet or server needed. It makes sense if customers don’t want their files uploaded, processed, and deleted on a server.

But on the flip side, are they okay with the fact that offline obfuscators get leaked or cracked pretty regularly sometimes every month?

I think that’s the real issue here.

Edited August 12Aug 12 by Fr0Mu

24 minutes ago, Fr0Mu said:

and deleted on a server.

it's a big big doubt

Just now, jackyjask said:

it's a big big doubt

Set your "doubts" aside or use some well-known one for $500 then watch its leaked version or deobfuscator pop up the next day, mate.

This is called free will.

2 hours ago, Fr0Mu said:

or use some well-known one for $500 then watch its leaked version or deobfuscator pop up the next day, mate.

It depends on how well you know how to use well-known protectors. 🙂

28 minutes ago, InvizCustos said:

It depends on how well you know how to use well-known protectors. 🙂

That's not how it works, unrelated..

On 5/25/2025 at 3:45 PM, Fr0Mu said:

You can find more info and join the community here:
Website

It doesn't even work...

Spoiler

 

Edited August 12Aug 12 by InvizCustos

33 minutes ago, InvizCustos said:

It doesn't even work...

  Reveal hidden contents

 

 

 

 

 

Use rikadotnet.com and try disabling your VPN/Proxy or similar stuff if you have one.

1 hour ago, Fr0Mu said:

Use rikadotnet.com and try disabling your VPN/Proxy or similar stuff if you have one.

 

Spoiler

All these obstacles do not contribute to the popularity of your obfuscator.

Edited August 12Aug 12 by InvizCustos

12 minutes ago, InvizCustos said:

 

  Hide contents

All these obstacles do not contribute to the popularity of your obfuscator.

"Use rikadotnet.com" are you blind by any chance or what.

I just can't edit my previous message and my profile has that new link as well that's your lack of reading skills, sorry.

What is the problem with redirecting the previous domain to the new one?

4 minutes ago, InvizCustos said:

What is the problem with redirecting the previous domain to the new one?

I wanted to strengthen your reading and research skills, that's why.

Edited August 12Aug 12 by Fr0Mu

With this approach to business, no one will use your product.
Unnecessary obstacles have been created for potential customers where they simply should not exist.
At the same time, other obfuscators do not encounter such obstacles.

10 minutes ago, InvizCustos said:

With this approach to business, no one will use your product.
Unnecessary obstacles have been created for potential customers where they simply should not exist.
At the same time, other obfuscators do not encounter such obstacles.

Whatever helps you sleep at night 😃

VMProtect has no good string obfucation after you unpacked via

Veysel072/VMPUnpacker: VMPUnpacker is a static unpacker designed for VMProtect, allowing users to analyze packed binaries efficiently. Please note that this tool does not include an import fix. 🛠️💻 so I don't recommend it. EazFuscator can be solved via holly-hacker/EazFixer: A deobfuscation tool for Eazfuscator.

Themida can be solved via ergrelet/unlicense: Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.

this application also when you obfuscate code antiviruses get triggers generally and some other .NET obfuscators can be auto unpacked via my antivirus project HydraDragonAntivirus/HydraDragonAntivirus: Dynamic and static analysis with Sandboxie for Windows, including EDR, ClamAV, YARA-X, custom machine learning AI, behavioral analysis, NLP-based detection, website signatures, Ghidra, Suricata, Sigma, and much more than you can imagine.

What I reocmmend is Enigma 7.x 64 bit but it probably can be unpacked via HydraDragonAntivirus/MegaDumper: Fixed 2025 version of Mega Dumper with 64 bit and generic PE support

so there is no good obfuscatorr for .NET to fully protect your code.

2 hours ago, hydradragonantivirus said:

VMProtect has no good string obfucation after you unpacked via

Use this protector String protection Encoding strings and compress Encoding strings. whats doing? embeded strings in dll resourse and decryptiing on Runtime.

https://github.com/DestroyerDarkNess/SecureByte/tree/main

Edited September 23Sep 23 by .hloire

1 hour ago, 0xman said:

Use this protector String protection Encoding strings and compress Encoding strings. whats doing? embeded strings in dll resourse and decryptiing on Runtime.

https://github.com/DestroyerDarkNess/SecureByte/tree/main

I've tried to protect:
https://forum.tuts4you.com/applications/core/interface/file/attachment.php?id=18591
in the end I had to uncheck "Anticrack", 'AntiVirtualMachine", "EncodeStrings", "Encode & Compress Resources", "Reference Proxy".

4 hours ago, hydradragonantivirus said:

VMProtect has no good string obfucation after you unpacked via

Veysel072/VMPUnpacker: VMPUnpacker is a static unpacker designed for VMProtect, allowing users to analyze packed binaries efficiently. Please note that this tool does not include an import fix. 🛠️💻 so I don't recommend it. EazFuscator can be solved via holly-hacker/EazFixer: A deobfuscation tool for Eazfuscator.

Themida can be solved via ergrelet/unlicense: Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.

this application also when you obfuscate code antiviruses get triggers generally and some other .NET obfuscators can be auto unpacked via my antivirus project HydraDragonAntivirus/HydraDragonAntivirus: Dynamic and static analysis with Sandboxie for Windows, including EDR, ClamAV, YARA-X, custom machine learning AI, behavioral analysis, NLP-based detection, website signatures, Ghidra, Suricata, Sigma, and much more than you can imagine.

What I reocmmend is Enigma 7.x 64 bit but it probably can be unpacked via HydraDragonAntivirus/MegaDumper: Fixed 2025 version of Mega Dumper with 64 bit and generic PE support

so there is no good obfuscatorr for .NET to fully protect your code.

sorry but that's pretty unrelated, Rika .NET is neither themida nor VMProtect so your comparison is ridiculous.

Try unpacking the sample I've shared before with your miraculous "tool" and let me know the results.

Also obfuscator's purpose is not decreasing the detections, but to obfuscate code.

Have a good day..

Though I talked for my own obfuscator since i was the one who suggested recently, even VMProtect .NET is not all about string encryption so do your research better next time..

Where is your sample? Please give it.

Your website get blacklisted.

I believe your website is scam because for Turkish software 99 dolar and 199 dolar is so high price. I also going to blacklist it and I have api for Bitdefender which can easily check is yoru website really blacklisted even if not shown at virustotal.

Are you just selling AgentTesla or it's false positive? VirusTotal - File - 36250f95f5b679b971fc0f1ec37bb41363786d40246b45298dd8d5d8bcaf4eec

OK now I get his crackme file.

35 minutes ago, hydradragonantivirus said:

Where is your sample? Please give it.

Your website get blacklisted.

I believe your website is scam because for Turkish software 99 dolar and 199 dolar is so high price. I also going to blacklist it and I have api for Bitdefender which can easily check is yoru website really blacklisted even if not shown at virustotal.

Are you just selling AgentTesla or it's false positive? VirusTotal - File - 36250f95f5b679b971fc0f1ec37bb41363786d40246b45298dd8d5d8bcaf4eec

Yeah genius, I'm a scammer who bothered to create one of the best commercial obfuscators, create a website/social media channels for it just for scamming 100 bucks 🥱

Also I have no idea about your virustotal analysis lmao, not even one accurate word in your message.

Eğer yaptığın şey hakkında hiçbir şey bilmiyorsan yapma.

2 hours ago, CodeExplorer said:

I've tried to protect:
https://forum.tuts4you.com/applications/core/interface/file/attachment.php?id=18591
in the end I had to uncheck "Anticrack", 'AntiVirtualMachine", "EncodeStrings", "Encode & Compress Resources", "Reference Proxy".

you must check, encode strings and encode & compress resource string then you need to analyze module 😃




its not compelet yet I will complete it and I can share this soon.
@CodeExplorer
What is your opinion about this. hnm thnks

Edited September 23Sep 23 by 0xman