de4dot - Deobfuscator for .NET

[simx]

You can force De4dot to select which de-obfuscation technique is to be used.

[cracki]

can deobfuscate smartassembly?

[sendersu]

can - yes!
just GIAT!

[CRC32]

Best Tool!

[schrodyn]

I was wondering if people are still using de4dot or are there better alternatives now?

[TQN]

You can try this
https://github.com/HongThatCong/de4dot_mod

[rasta]

Looks like de4dot mod is .net 3.5 based anything for 4.x or even 5 available?

[mdj]

cannot decrypt dotfuscator string

[blue_devil]

Hello friends,
I hate necrobumping, but I think this is the best place to ask a question about de4dot.

The original de4dot repo is this:

https://github.com/de4dot/de4dot

This repo is archived and it is not maintaining now. There are a lot of different modified versions of de4dot, I personally use @Mobile46 's modified version:

https://forum.exetools.com/showthread.php?t=19822
https://github.com/mobile46/de4dot

You know dnSpy is also archived but [thank to open source gods] a guy took responsibility and now maintains dnSpy:

https://forum.exetools.com/showpost.php?p=127018&postcount=105
https://github.com/dnSpyEx/dnSpy

Maybe I have missed, are there anyone who maintains and continues developing de4dot like dnspy(ex)? Or all we have is modified versions of it?

Thank you.

[zen]

blue_devil this was a great question, though I don't know the answer and usually use mobile46 version as well. My collection is approximately the same as this dump:
https://github.com/ipwnosx/de4dot-All-Version-2021, meaning I have no secret de4dot. There are other good deobf tools like SAE which are also growing stale over time..

[blue_devil]

Originally Posted by zen

blue_devil this was a great question, though I don't know the answer and usually use mobile46 version as well. My collection is approximately the same as this dump:
https://github.com/ipwnosx/de4dot-All-Version-2021, meaning I have no secret de4dot. There are other good deobf tools like SAE which are also growing stale over time..

I got it.

After writing this post, I have continued searching. Unfortunately, there is nobody who keeps developing de4dot (like in dnSpyex). Nevertheless we have modified versions. At least they are open source.

@zen, what do you mean by SAE? Do you mean, "Simple Assembly Explorer"? If it is, it is not a deobfuscator, am I wrong?

[sendersu]

Yeah, SAE was quite cool tool for it's age... back 7..8+ years ago
but it is still usable
https://github.com/wickyhu/simple-assembly-explorer

the only tool that could show decompilation output from more then one engine...
theoretically extendable

[blue_devil]

@Yeah you are right, but I use dnSpy and Reflector+Reflexil; mostly.

[sendersu]

dnSpy is super cool except it uses very old ILSpy decompiler engine under the hood (IL3 or IL4)
right now IL8 is available and it is a huge change comparing to what is used in old good dnSpy...
BTW, Reflexil is available as plugin for ILSpy as well, not just for .NET Reflector