From Collaborative RCE Tool Library

Jump to: navigation, search

.NET Packers

Tool name: .netshrink
Rating: 5.0 (1 vote)
Author: Bartosz Wójcik                        
Current version: 2.7
Last updated: July 2, 2016
Direct D/L link:
License type: Shareware
Description: .netshrink is an exe packer (aka executable compressor). It means it can take your Windows or Linux .NET application executable file, compress it, add unpacking code to the output file while leaving it fully functional but with decreased size.

.netshrink uses LZMA compression algorithm to achieve maximum compression ratios.

With .netshrink you can password protect your applications, it will be impossible to run it without the proper password.

Password protection uses verification based on SHA256 hash function and 256 bit AES / Rijndael encryption.

With .netshrink you can also bind multiple DLL libraries to the output file so you can redistribute your application as a standalone file

Version history


* Strong-Name Signing added
* Digital Code Signing added (support for double signatures, compatible with Windows 10)


* Cecil library updated to the latest version
* .netshrink's main executable and setup file digitally signed
* default expiration date added for the compressed applications in demo mode (7 days)
* minor GUI improvements


* .NET 4.5 detection added
* .NET Framework detection improved
* .NET 4.x loader bugs removed Drag&Drop bugs removed


* detection of the .NET Framework (using native loader)
* command line parameters parsing fixed
* known issues section added to the help file
* minor bugs fixed

* project files support added
* list of locally stored passwords added
* fixed bugs with handling x64 applications

* original assembly CPU architecture preservation
* running compressed assemblies from the UNC paths fixed

* virtual DLL libraries binding to the output executable file
* detection of cracking and unpacking tools
* backup file creation
* original assembly name, copyright and company information preservation

* detection of already compressed applications
* minor bugs fixed

* resources preservation (all resources, including icons, manifests etc.)
* compression of command line executables
* support added for .NET Framework 3.0, 3.5 and 4.0
* .NET Framework auto detection
* updated password query dialogs
* enter password from the command line for protected files
* minor bugs fixed
* help file updated to .chm format

* first public release
Also listed in: (Not listed in any other category)
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)

Tool name: CSharpFuscator
Rating: 0.0 (0 votes)
Author: papanyquiL                        
Current version: 1.0
Last updated: June 24, 2009
Direct D/L link:
License type: Free
Description: The CSharpFuscator tool scrambles .NET source code to make it very difficult to understand or reverse-engineer. This provides significant protection for source code intellectual property, and even provides protection against the all-too-disassembly of .NET object code.
Also listed in: (Not listed in any other category)
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)

Tool name: Detect It Easy
Rating: 0.0 (0 votes)
Author: Hors                        
Current version: 1.01
Last updated: March 23, 2016
Direct D/L link:
License type: Free (both for commercial and non-commercial usage) and open source
Description: Detect it Easy

Detect It Easy, or abbreviated “DIE” is a program for determining types of files.

“DIE” is a cross-platform application, apart from Windows version there are also available versions for Linux and Mac OS.

Many programs of the kind (PEID, PE tools) allow to use third-party signatures. Unfortunately, those signatures scan only bytes by the pre-set mask, and it is not possible to specify additional parameters. As the result, false triggering often occur. More complicated algorithms are usually strictly set in the program itself. Hence, to add a new complex detect one needs to recompile the entire project. No one, except the authors themselves, can change the algorithm of a detect. As time passes, such programs lose relevance without the constant support.

Detect It Easy has totally open architecture of signatures. You can easily add your own algorithms of detects or modify those that already exist. This is achieved by using scripts. The script language is very similar to JavaScript and any person, who understands the basics of programming, will understand easily how it works. Possibly, someone may decide the scripts are working very slow. Indeed, scripts run slower than compiled code, but, thanks to the good optimization of Script Engine, this doesn\'t cause any special inconvenience. The possibilities of open architecture compensate these limitations.

DIE exists in three versions. Basic version (“DIE”), Lite version (“DIEL”) and console version (“DIEC”). All the three use the same signatures, which are located in the folder “db”. If you open this folder, nested sub-folders will be found (“Binary”, “PE” and others). The names of sub-folders correspond to the types of files. First, DIE determines the type of file, and then sequentially loads all the signatures, which lie in the corresponding folder. Currently the program defines the following types:

• MSDOS executable files MS-DOS

• PE executable files Windows

• ELF executable files Linux

• MACH executable files Mac OS

• Text files

• Binary all other files
Also listed in: Compiler Identifiers, Entropy Analyzers, Exe Analyzers, Linux Tools, Mac OS Tools, PE EXE Signature Tools, PE Executable Editors, Packer Identifiers, Tool Signatures
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)

Tool name: dotNet Protector Win32
Rating: 0.0 (0 votes)
Author: PV Logiciels                        
Current version: 5.5.3972
Last updated: November 8, 2008
Direct D/L link:
License type: Commercial (with full featured trial)
Description: dotNet Protector is a powerful .NET code protection system that prevents your assemblies from being decompiled. With dotNet Protector, your application is not simply obfuscated, but method bodies are encrypted. EXE DLL, ASPNET and SQL assemblies can be protected. You can protect a whole application (main exe, referenced dlls) in a single executable. Your .NET code will run entirely from memory, without temporary disk storage.

Protection can be done interactively with an intuitive graphical interface, or automated, using the command-line functionalities of dotNet Protector.

dotNet Protector includes a powerful hardware sensitive anti-piracy system and extensions to help you develop your own software activation system. dotNet Protector is self-protected and uses its internal software activation system.
Also listed in: (Not listed in any other category)
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)

Tool name: Phoenix Protector
Rating: 0.0 (0 votes)
Author: Daniel Pistelli                        
Current version:
Last updated: June 2, 2008
Direct D/L link:
License type: Free
Description: The Phoenix Protector was created to protect .NET assemblies and it's the ideal solution for every .NET developer, due to its support of every kind of project and compatibility with every version of the .NET framework. It has all common obfuscation features to secure your code. It provides obfuscation features like Name, String and Control Flow Obfuscation. The last feature is particularly important since it prevents the .NET assembly from being decompiled into an understandable language. The Name Obfuscation is provided with an exclusion list.

I first wrote the core of the Phoenix Protector for a company when I was 19. That project didn't work out for internal reasons not related to the quality of the product itself. I then wrote the Phoenix Protector, which was basically a new GUI for the now improved core. However, during the years (one has to consider that I was quite young when I developed the .NET obfuscator) I became ever more conscious that I didn't want to spend my life writing protections and also that I was not convinced by protections for the .NET technology in the first place. That's partly why I wrote Rebel.NET. By combining Rebel.NET with the DisasMSIL engine it is very easy to write a code obfuscator for .NET assemblies. The only thing which would be missing is name obfuscation and string encryption, which are even easier as protections. That's why I'm releasing the Phoenix Protector for free: nowadays, writing a commercial obfuscator doesn't make much sense to me. The code obfuscation provided by the Phoenix Protector is quite good when compared to other commercial obfuscators. I noticed that most obfuscators provide a very easy to reverse code obfuscation scheme. I'm not saying that the Phoenix Protector's code obfuscation can't be reversed. Every .NET code obfuscation scheme can be reversed somehow and the rebuilding task becomes very easy through Rebel.NET.
Also listed in: Packers
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)

RSS feed Feed containing all updates and additions for this category.

RSS feed Feed containing all updates and additions for this category, including sub-categories.

Category Navigation Tree
   Code Coverage Tools  (13)
   Code Ripping Tools  (2)
   Helper Tools  (3)
   Hex Editors  (13)
   Memory Patchers  (7)
   Packers  (20)
   .NET Packers  (5)
   Javascript Packers  (1)
   Profiler Tools  (11)
   String Finders  (10)
   Tool Hiding Tools  (8)
   Tracers  (23)
   Needs New Category  (3)