Reverse Engineering RET Homepage RET Members Reverse Engineering Projects Reverse Engineering Papers Reversing Challenges Reverser Tools RET Re-Search Engine Reverse Engineering Forum Reverse Engineering Links

Go Back   Reverse Engineering Team Board > Reverse Engineering Board > .NET Reverse Engineering
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Display Modes
  #1  
Old 12-29-2010, 05:35 PM
SSBelmont SSBelmont is offline
Member
 
Join Date: Dec 2010
Posts: 7
Default Cracking xheo obsfucation...

Are there any known approaches to crack xheo? My Boss is considering purchasing this tool for obsfuction and I would like to prove to him it can be reversed.

Any recommendations for coming up with a proof of concept?

Thanks!
SS
Reply With Quote
  #2  
Old 12-29-2010, 06:51 PM
Kurapica Kurapica is offline
Senior Member
 
Join Date: May 2006
Location: Archives
Posts: 357
Default

Xheo.DeployLX.Enterprise.Edition.v3.0.R16233-Lz0.zip

XHEO.Codeveil.v1.3.R5901-Lz0.rar

best proof ?
__________________
Life can only be understood backwards but It must be read forwards.
Reply With Quote
  #3  
Old 12-29-2010, 08:05 PM
SSBelmont SSBelmont is offline
Member
 
Join Date: Dec 2010
Posts: 7
Default

XHEO.Codeveil.v1.3.R5901-Lz0.rar

Quote:
Originally Posted by Kurapica View Post
Xheo.DeployLX.Enterprise.Edition.v3.0.R16233-Lz0.zip

XHEO.Codeveil.v1.3.R5901-Lz0.rar

best proof ?
What I looking for is not how to crack the tool itself, but to reverse the code or assembly that the xheo obsfucation has been applied to so it's readable using .NET Reflector (RedGate).
Reply With Quote
  #4  
Old 12-30-2010, 08:14 AM
Kurapica Kurapica is offline
Senior Member
 
Join Date: May 2006
Location: Archives
Posts: 357
Default

maybe you didn't understand me !

that fact that the tool was cracked, simply means that its protection was broken using tools like Reflector or others because the tool is protected by its own protection method.
__________________
Life can only be understood backwards but It must be read forwards.
Reply With Quote
  #5  
Old 12-30-2010, 10:53 AM
SSBelmont SSBelmont is offline
Member
 
Join Date: Dec 2010
Posts: 7
Default

Quote:
Originally Posted by Kurapica View Post
maybe you didn't understand me !

that fact that the tool was cracked, simply means that its protection was broken using tools like Reflector or others because the tool is protected by its own protection method.
Ok, that makes sense. Are you familiar with the method and how I can use the approach to view an application in reflector that has applied XHEO?

I have read about the method tables and the work that UFO and others have done, but have not found any steps on how to do this manually or via an unpacker or deobfuscation tool.

Thanks for all the help.
Reply With Quote
  #6  
Old 12-30-2010, 12:43 PM
Kurapica Kurapica is offline
Senior Member
 
Join Date: May 2006
Location: Archives
Posts: 357
Default

sorry my friend but If I show you the way then I will have to kill you

kidding...

I mean it's not a public knowledge, I think you will have to analyze it and find your own way, no one will give you a one-click tool to crack this :|

good luck
__________________
Life can only be understood backwards but It must be read forwards.
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump





Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2021, Jelsoft Enterprises Ltd.