Patrick979 / .NET-Deobfuscator

A list of useful tools to unpack various .NET Assembly.

.NET-Deobfuscator

A List of .NET Deobfuscation Tools

• Confuser 1.9

  • CDeobfuscator - Deobfuscator for Confuser 1.9.0.0 release
  • NoFuserEX - NoFuserEx

• Crypto Obfuscater

  • Crypto - A Deobfuscator for Crypto Obfuscator

• Dumper

  • ExtremeDumper - A Pretty Good Tool for Dumping
  • Nemesis - Custom Process Dumper
  • MegaDumper - Dump .NET/Native Files
  • KsDumper - Kernel Dumper

• Eazfuscator

  • eazfixer - A Deobfuscator for Eazfuscator.
  • eazdervirtualizer - A Devirtualizer for Eazfuscator.

• De4Dot

  • de4dot - Most known .NET deobfuscator and unpacker.

• DNP (DotNetPatcher)

  • DNP-Deobfuscator - DNP Deobfuscator
  • DNP-Deobfuscator - DNP Deobfuscator

• DotNetCompressor

  • DNC-Decompressor - Decompresses files.

• DotRefiner

  • DotRefiner-Deobfuscator - DotRefiner Deobfuscator

• Agile

  • AgileStringDecryptor - Agile string decrypto

• ArchangelCloak

  • ArchangeIUncloaker - ArchangelCloak Deobfuscator

• Babel

  • BabelDeobfuscator - BabelDeobfuscator is an open-source deobfuscator for BabelObfuscator
  • DeBabelVM - DeBabelVM is a restorer for the Babel Obfuscator - This will restore 'msil encrypt' methods for Babel
  • Babel-Deobfuscator - Babel-Deobfuscator is an open-source deobfuscator for Babel Obfuscator.

• Atomic

  • Atomic-Deobfuscator - A deobfuscator for Atomic obfuscator

• AutoIt

  • DeobHellper - AutoIT Deob Helper

• Autori Obfuscator

  • NeonFuscatorDeobfuscator - .NET Deobfuscator for Autori Obfuscator

• Babel

  • BabelDeobfuscator - BabelDeobfuscator
  • DeBabelVM - DeBabelVM - Removes VM Protection from Babel
  • Babel-Deobfuscator - BabelDeobfuscator

• BoxedAppPacker

  • BoxedAppUnpacked - Unpacker for BoxedApp

• BytePress

  • BytePressDecompressor - Bytepress decompressor

• Beebyte

  • beeless - BeeByte Deobfuscator.

• Panda

  • Panda Deobfusactor - Panda Deobfuscator.

• OrangeHeap

  • OrangeHeap Deobfusactor - OrangeHeap Deobfuscator.

• MemeVM

  • MemeDevirtualizer - Devirtualizer for MemeVM.
  • MemeVM-Devirt - Devirtualizer for MemeVM.
  • MemeVMDevirt - Devirtualizer for MemeVM.

• NashaVM

  • Deoxys - Devirtualization for NashaVM.
  • TheBear - Alternative Devirtualizer for NashaVM.

• KoiVM

  • OldRod - Devirtualization for KoiVM.

• Cyphor

  • Cyphor-Pointer-Remover - Removes Pointer Mutations

• Themida

  • Themida Unpacker .NET - deobfuscates Themida Protection
  • Panda Themida .NET Decompiler - Themida 'Decompiler'

• Unspecific Tools

  • DoubleParseFixer - Double Parse Obfuscation Fixer.
  • SizeOf-Replacer - SizeOf Replacer.
  • AntiInvokeDetection - Anti Invoke Detection.
  • Dumpy - .NET deobfuscator.
  • RzyFixer - A .NET Unpacker tool.
  • PointMutationRemover - Point Mutation Remover.
  • ProxyCall-Remover - Remove Proxy Calls.
  • CalliFixer - Simple program to remove call to calli protection.
  • Universal-Math-Fixer - Math Fixer.
  • Universal-Proxy-Remover - Universal Proxy Remover.
  • SimpleMathCleaner - Simple Math Cleaner.
  • AssemblyFixer - Fixes Assembly.
  • AntiDecompiler-Cleaner - Anti Decompiler Cleaner.
  • SuperCalculator - Super Calculator.
  • IntToString-Deobfuscator - Int To String Deobfuscator.
  • Mathematical-Operation-Simplifier - Mathematical Operation Simplifier.
  • SizeOf-Fixer - SizeOf Protection Fixer.
  • ProxyCall-Remover - ProxyCall Remover.
  • Local2FieldFixer - Local to Field Fixer.
  • AssemblyRebuilderOld - Rebuilds Assembly.
  • Excess-Nop-Remover - Remove excess nop opcodes.
  • Junk-Remover - Removes Junk from .Net Assembly.
  • Base64Encoding-Fixer - Base64 String Encoding Fixer.