PDA

View Full Version : .Net Id


rongchaua
04-09-2009, 05:08 AM
When I reversed a .net assembly which is packed and obfuscated, I always confuse myself to define which of packer is being used to protect that assembly. So I would like to have a tool like PEiD to identify the signature of an assembly. I waited for a long time so that someone will write such tool but it seems that no one has time to do that. So yesterday I decided to write myself a small tool to identify the signature of assembly (not exact signature but the pattern which helps to identify the packer or obfuscator). It was written only for .net (not native code). I will try support to identify more signatures.

This tool is now on beta version. Use it on your risk, you can help me to improve it by sending a muster assembly with a comment telling me which packer or obfuscator is applied on that assembly.

* Requirements : .NET Framework 2.0

* Version: 1.0.0.0
* Supported version of Assembly
o All versions
* All comments for this tool. Post directly below.

NOTE: If this tool doesn't work with your system, post here your errors.

LINK DOWN: http://rongchaua.net/tools-mainmenu-36/131-net-id
HISTORY:

* [1.0.0.0] : Beta Version

Dielbach
04-10-2009, 04:44 AM
Thank you, something I am looking for a long time.:)

tankaiha
04-10-2009, 08:21 AM
cool, I want this for long time!
two advice:
1.support drag and drop
2.support detection of more proections(IntelliLock,Goliath,Themida,etc)

sirp
04-14-2009, 03:42 AM
yep realy usefull ,until now i used the sigs Kurapica gave me for cff explorer ... lets see if the proggy is more exact ,) thx