View Single Post
  #3  
Old 10-21-2024, 18:57
rkc3214 rkc3214 is offline
Friend
 
Join Date: Oct 2024
Posts: 4
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 2
Thanks Rcvd at 0 Times in 0 Posts
rkc3214 Reputation: 0
Quote:
Originally Posted by sendersu View Post
There is a tool to remove agile - https://github.com/SychicBoy/AgileDotNetSlayer
(not sure if it takes care if the code is vt-zed)

regarding obf - I"d recommend VMP latest ver, its very strong and aggressive stuff and it suports .net + VT
So i've tried the dotnetslayer but it could not handle the obfuscation

I've tried SMD for agile and it says it managed to decrypt x number of methods but going into dnspy showed nothing changed, file size was 1kb larger

Am I correct in saying that if an agile deobfuscator works, de4dot would then be used to de-virtualise?
Reply With Quote