• 0

Free Obfuscation .NET


Question

2 answers to this question

Recommended Posts

  • 0

You'd probably have better luck writing one yourself. Although that's no trivial task, neither is finding a free (and good) .NET obfuscator. The quality of obfuscation programs generally is not so great, and the only truly free one (lots of companies shout "FREE!" and then tell you that that actually meant free-as-in-evaulation) that I've been able to find (Aspose) has enough bugs in it that I would not trust it to obfuscate assemblies I want actual people to use.

As for open source, I've seen one. It was an example in a book about obfuscation called Desaware QND Obfuscator (distributed under MPL 1.1). The last time I tried it, it was VERY limited and didn't do a terribly good job of obfuscation -- it only obfuscates private code and it doesn't do a great job on even that. But both of those things can be changed without really adding any code (except for mapping code if your project spans multiple assemblies), and the result is about the equal of anything you'll find for free (http://www.desaware.com).

  • 0

I do not know to much about this, but have you tried RetroGuard and JODE Modules for Sun ONE Studio Mobile Edition

I do not know if this is what you are looking for but go to Sun's webpage. Perhaps this will help you!

And a small article that may also help!

Code Protection ? Prevent Assembly Decompilation.b>

Description:There are a couple of options to prevent the user from reverse-engineering your assembly. Let us discuss the following techniques.

1. Native Image generation

2. Strong-naming the assembly

3. Hiding the Implementation via a web service

4. Obfuscation.

Native Image Generationb>

One technique you may try is to create a native image of your assembly. This is done via the ngen tool that comes with .NET. This tool doesn't work with CIL source files; rather, it takes a .NET assembly and transforms it into a native assembly. For example, you can create a native image of AI.dll as follows:

ngen AI.dll

The tool creates a native image of the assembly, but it puts the result into the Native Image Cache (NIC). You can see what's in the cache by using the /show argument of ngen:

ngen /show

Unfortunately, the results aren't what you might expect. The problem is that you still need the original assembly for the client code to run properly. ngen essentially creates implementations of your methods, but the metadata is contained in the original assembly. If you try to run an assembly that uses AI.dll after you employed ngen on it and deleted (or renamed) the source AI.dll, the client will throw a FileNotFoundException.

The runtime will always load the CIL-based assembly, but it's smart enough to use the native implementations if they exist in the NIC. Therefore, you can't distribute a native image without the regular assembly. Someone will always be able to reengineer the code like I did before, and if you rename the resulting assembly and target the client to use this new assembly, you can prevent the runtime from using the native implementations.Strong-Naming the assemblyb>

The best you can do with strong-naming your assembly is that you can prevent others from reverse-engineering your code and putting your brand on it. It doesn't prevent others from at least being able to see the underlying code.Hiding the Implementation as Web Servicesb>

If your clients have high-speed Internet access, another option available is to make them Web services. Clients can access the assembly's functionality, but they can't get the physical assembly itself. Also, if a bug did occur in your assembly, fixing the offending code means that all clients get the fix at one time.

Of course, there may be situations where this is not feasible. For example, if you were writing a high-performance graphics engine to compete with DirectX, you probably don't want the method invocations to occur over HTTP. However, if you know that you must protect your resources, then keeping them off the client's machine may the safest way to do so.Obfuscationb>

This is basically a technique in which a tool will take input, like source code or a PE file, and create output that makes it very difficult for reverse-engineering tools to discover what the executable is doing. However, it will not change the expected behavior of the code, and it may make loading times quicker.

Out of all the options available, this one covers all of the bases, and I think it's the best measure you can take to protecting your investment. Remember, though, that obfuscation is not a guarantee. Someone with enough perseverance may figure out ways to get around an obfuscator in the future.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Neat and welcome functionality...
    • Hey, some don't give a damn about STDs and gain pleasure from living animalistic lifestyles. Different strokes for different folks...
    • Halo Studios is teasing a big reveal for the series this October by Pulasthi Ariyasinghe Halo Studios, formerly 343 Industries, is preparing to reveal what it has been working on since the release of Halo Infinite. Other than providing support for existing Halo works, like Master Chief Collection and Infinite, the Xbox first-party studio has been rather quiet about its next releases since 2021. In its monthly blog post on Halo Waypoint, the developer had a special section regarding its future plans and dropped a pretty heavy teaser about an October announcement. Just like at the 2024 Halo World Championship, this year, the studio is planning another special announcement for fans. "Over the past few weeks, there’s been a fair amount of speculation about when and where more details might emerge about any of the multiple projects Halo Studios is actively working on," says the studio. "We don’t usually comment on such matters, but this time we want to enter the chat and share a little more perspective for Halo fans who might be on the fence about whether to attend this year’s event." In October of last year, 343 Industries, the development team that has been making games in the series since Halo 4 in 2012, went through a major rebranding to become Halo Studios. While no exact details were given, alongside a teaser video, the studio said then that multiple projects were currently in development but are years away from being released. It also revealed last year that the Slipspace Engine it developed for Halo Infinite is also being left behind in favor of Unreal Engine 5. "Speculation is always fun, but if you want the official scoop on what Halo Studios has been working on, you won’t want to miss this year’s Halo World Championship," added the studio. "We really hope you’ll join us in Seattle this October!" The 2025 Halo World Championship is slated to take place on October 24 in Seattle. Halo will be turning 25 years old in 2026, and it's likely that a new game or a remaster project will be revealed during this event.
    • I enjoy using Discover Weekly. I have found new music using it. Just sometimes it goes off the rails and doesn't remember I don't like rap. I'm not sure this update is anything helpful, but I guess I'll try it if it comes to free accounts.
  • Recent Achievements

    • Week One Done
      dennis Nebeker earned a badge
      Week One Done
    • One Year In
      timothytoots earned a badge
      One Year In
    • One Month Later
      CHUNWEI earned a badge
      One Month Later
    • Week One Done
      TIGOSS earned a badge
      Week One Done
    • First Post
      henryj earned a badge
      First Post
  • Popular Contributors

    1. 1
      +primortal
      464
    2. 2
      +FloatingFatMan
      193
    3. 3
      ATLien_0
      165
    4. 4
      Xenon
      78
    5. 5
      wakjak
      72
  • Tell a friend

    Love Neowin? Tell a friend!