måndag 19 november 2012

Mono.Cecil Obfuscater [C#]

Obfuscating is quite basic, replace string and other thing such as Namespace,Type and so one.
Making it harder to read and offer protection against thief off the code. Making it harder to read,understand and copy. It's used to prevent cracking off product such as a paide program.

Very recommended to be used in managed application, and also abused in other product such as exploit pack to evade detection and in Malware to once again prevent detection from Anti virus.

Here is a scan off a .net bot, (used .net bot since mono cecil allow you only to obfuscate .net logic).
When  i posted this it had a detection rate off 16 / 43~, after using obfuscater (Self made based on Mono.Cecil our using Cecil what ever.)

We get this result 13/44, we lower it with 3, how ever when comparing the analysis i noticed that some detection dropped.

And if we bother comparing they are 15% similar and 85% different, Now with a more advanced obfuscater the result would be different (lower) since a more complex obfuscate would do more then just rename.

http://en.wikipedia.org/wiki/Obfuscation

Have a nice day :)


Inga kommentarer:

Skicka en kommentar