View Single Post
  #1  
Old 04-15-2025, 19:23
CodeCracker CodeCracker is offline
VIP
 
Join Date: Jun 2011
Posts: 905
Rept. Given: 68
Rept. Rcvd 660 Times in 278 Posts
Thanks Given: 64
Thanks Rcvd at 3,819 Times in 717 Posts
CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699
ConfuserEx-Unpacker

ConfuserEx-Unpacker :
Home page: https://github.com/XenocodeRCE/ConfuserEx-Unpacker

A dynamic confuserex unpacker that relies on invoke for most things
If the protected assembly is protected by anti-tamper protection remove it using ConfuseExDAntitamper https://forum.tuts4you.com/topic/45360-confuseexdantitamper
since this tool is bad for antitamper;
use it like this:
ConfuserEx-Unpacker.exe -d file_to_unpack
- This is the recommended option for unpacking most target; it is dynamic unpacking
You could try also static unpacking using ConfuserEx-Unpacker.exe -s file_to_unpack
There is also -vv parameter which can be passed to this program - very verbose - print more stuffs

First version:
- fixed some bugs in control flow deobfuscation
- added constants decryption; initially was only string decryption

ConfuserEx-Unpacker fixed1:
- Fixed some bugs ReferenceProxy removing;

ConfuserEx-Unpacker_fixed1_p2.rar
.sdata section - no anti-tamper fixed.
Attached Files
File Type: rar ConfuserEx-Unpacker_fixed1_p2.rar (1.11 MB, 48 views)
Reply With Quote
The Following 3 Users Gave Reputation+1 to CodeCracker For This Useful Post:
Codeman (05-30-2025), Dr.FarFar (07-01-2025), Mendax47 (05-26-2025)
The Following 17 Users Say Thank You to CodeCracker For This Useful Post:
alekine322 (04-17-2025), Apuromafo (04-16-2025), canopus (05-23-2025), Codeman (05-30-2025), creater01 (08-01-2025), Dr.FarFar (07-01-2025), Mendax47 (05-26-2025), niculaita (04-17-2025), pnta (06-28-2025), rooster1 (06-02-2025), tonyweb (04-20-2025), traf0 (04-16-2025), wilson bibe (04-16-2025), wx69wx2023 (04-16-2025), zionoobie (05-07-2025)