Exetools

Exetools (https://forum.exetools.com/index.php)
-   Community Tools (https://forum.exetools.com/forumdisplay.php?f=47)
-   -   ConfuserEx-Unpacker (https://forum.exetools.com/showthread.php?t=21245)

CodeCracker 04-15-2025 19:23

ConfuserEx-Unpacker
 
1 Attachment(s)
ConfuserEx-Unpacker :
Home page: https://github.com/XenocodeRCE/ConfuserEx-Unpacker

A dynamic confuserex unpacker that relies on invoke for most things
If the protected assembly is protected by anti-tamper protection remove it using ConfuseExDAntitamper https://forum.tuts4you.com/topic/45360-confuseexdantitamper
since this tool is bad for antitamper;
use it like this:
ConfuserEx-Unpacker.exe -d file_to_unpack
- This is the recommended option for unpacking most target; it is dynamic unpacking
You could try also static unpacking using ConfuserEx-Unpacker.exe -s file_to_unpack
There is also -vv parameter which can be passed to this program - very verbose - print more stuffs

First version:
- fixed some bugs in control flow deobfuscation
- added constants decryption; initially was only string decryption

ConfuserEx-Unpacker fixed1:
- Fixed some bugs ReferenceProxy removing;

ConfuserEx-Unpacker_fixed1_p2.rar
.sdata section - no anti-tamper fixed.

CodeCracker 06-28-2025 01:13

ConfuserEx-Unpacker-fixed3
 
1 Attachment(s)
ConfuserEx-Unpacker-fixed3:
- Added ushort (Uint16) array decryption, added sbyte array decryption;
- Fixed proxies call fixing
- Clean Constant init call in static constructor

If switch obfuscations is still present on some methods run after this ConfuserEx-Unpacker :
ConfuserEx Unpacker v2.0 by ElektroKill
https://at4re.net/f/thread-1431-post-9948.html#pid9948


All times are GMT +8. The time now is 09:03.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX