0xb11a1 / yetanotherobfuscator Goto Github PK

C# obfuscator that bypass windows defender

C# 100.00%

yetanotherobfuscator's Introduction

yetAnotherObfuscator

A C# obfuscator tool that can bypass Windows Defender antivirus. I made this tool mainly as an excuse to learn more about C# and how obfuscators function.

This is an alpha release, so expect some nice bugs.

Usage:

Drag drop the C# exe into yetAnotherObfuscator.exe Or provide the C# exe as an argument:

.\yetAnotherObfuscator.exe <PATH_TO_EXE>

Contributors ✨

@Resit

yetanotherobfuscator's People

Contributors

Stargazers

Watchers

Forkers

scriptidiot samy4samy dpakon1 gavz mmyyhack askyeye hxlxmjxbbxs crackercat shantanu561993 dannymas cmjlove1 apkc peacedata0 kash1064 vjingbi pdolinic greatmasterscodeexamples jermainlaforce benheise tony163163 msf-ntdll saksham2002 gmh5225 cokonas egida therealomarakermi 0xff1e071f dnasec thedivine tigr0w ahrendsschmidt empty2081 offbios short caozuoking rajivraj data-gami bbbfkl aliasgarli specialistexperts nocomp lucia361 zabuqasem ishan-saha curtishoughton an4kein matosdiego techris45 1203731177 r44wk xcalibure2 nuclearatk fleabane1 hamashyah pinkuburu oops4git svchost9913 startagain2016 serwazito0 sidneysimas bearowang yas11r yang-zhiyuan fzkiritsugu flangvik phuong39 vulnz robinfassinamoschiniforks killvxk kiansalem90 psyrun jjsdub556 cpo-eh deger123 flut7ter gysf666 filipesam enhboldh yippeekayay biubiukk jackreem guliqbal87 encryasdf1 brucebatman sudonap me009 126789t classic130 h1d3r zackmark29 freeide wreckseal jeffchan69 hdys0vn 0xajstrike op0ssum regset 5l1v3r1 fengjixuchui nbsp-null

yetanotherobfuscator's Issues

Seatbelt unable to properly resolve type 'Seatbelt.Commands.LolbasCommand+LolbasDTO'

Tested w/ SeatBelt. Just did a basic clone of this project and SeatBelt, compiled both, then copied SeatBelt.exe into the directory. Output is below. Looks to fail when attempting to resolve 'Seatbelt.Commands.LolbasCommand'.

PS C:\Dev\C#\yetAnotherObfuscator\yetAnotherObfuscator\bin\Debug> ls


    Directory: C:\Dev\C#\yetAnotherObfuscator\yetAnotherObfuscator\bin\Debug


Mode                 LastWriteTime         Length Name
----                 -------------         ------ ----
d-----          6/6/2023  12:18 PM                app.publish
-a----        11/19/2022   7:46 AM        1167872 dnlib.dll
-a----        11/19/2022   7:46 AM        1854717 dnlib.xml
-a----         4/12/2023   6:25 PM         697856 Seatbelt.exe
-a----          6/6/2023  12:18 PM           1884 yetAnotherObfuscator.application
-a----          6/6/2023  12:18 PM          12288 yetAnotherObfuscator.exe
-a----          6/6/2023  12:17 PM            272 yetAnotherObfuscator.exe.config
-a----          6/6/2023  12:18 PM           5302 yetAnotherObfuscator.exe.manifest
-a----          6/6/2023  12:18 PM          34304 yetAnotherObfuscator.pdb


PS C:\Dev\C#\yetAnotherObfuscator\yetAnotherObfuscator\bin\Debug> $(ls .\Seatbelt.exe).fullname
C:\Dev\C#\yetAnotherObfuscator\yetAnotherObfuscator\bin\Debug\Seatbelt.exe
PS C:\Dev\C#\yetAnotherObfuscator\yetAnotherObfuscator\bin\Debug>
PS C:\Dev\C#\yetAnotherObfuscator\yetAnotherObfuscator\bin\Debug>
PS C:\Dev\C#\yetAnotherObfuscator\yetAnotherObfuscator\bin\Debug> .\yetAnotherObfuscator.exe        
  __    __  ______  _____
 /\ \  /\ \/\  _  \/\  __`\
 \ `\`\\/'/\ \ \L\ \ \ \/\ \
  `\ `\ /'  \ \  __ \ \ \ \ \
    `\ \ \   \ \ \/\ \ \ \_\ \
      \ \_\   \ \_\ \_\ \_____\
       \/_/    \/_/\/_/\/_____/
Enter exe path: C:\Dev\C#\yetAnotherObfuscator\yetAnotherObfuscator\bin\Debug\Seatbelt.exe
[+] Working on: C:\Dev\C#\yetAnotherObfuscator\yetAnotherObfuscator\bin\Debug\Seatbelt.exe
[+] Injecting the decryption method
[+] Encrypting all strings with encryption key: uvRT5AELd8uSvpZm6prD5NtWRqYKwnlGr2cLcCCaIc
[+] Changing classes names
[+] Saving the obfuscated file
[+] Changing exe GUID if it exists
[+] All done, the obfuscated exe in: C:\Dev\C#\yetAnotherObfuscator\yetAnotherObfuscator\bin\Debug\Seatbelt.exe._obf.exe

PS C:\Dev\C#\yetAnotherObfuscator\yetAnotherObfuscator\bin\Debug> .\Seatbelt.exe._obf.exe
Unhandled terminating exception: System.TypeLoadException: Could not load type 'Seatbelt.Commands.LolbasCommand+LolbasDTO' from assembly 'Seatbelt, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null'.
   at System.Reflection.CustomAttribute._CreateCaObject(RuntimeModule pModule, IRuntimeMethodInfo pCtor, Byte** ppBlob, Byte* pEndBlob, Int32* pcNamedArgs)
   at System.Reflection.CustomAttribute.CreateCaObject(RuntimeModule module, IRuntimeMethodInfo ctor, IntPtr& blob, IntPtr blobEnd, Int32& namedArgs)
   at System.Reflection.CustomAttribute.GetCustomAttributes(RuntimeModule decoratedModule, Int32 decoratedMetadataToken, Int32 pcaCount, RuntimeType attributeFilterType, Boolean mustBeInheritable, IList derivedAttributes, Boolean isDecoratedTargetSecurityTransparent)
   at System.Reflection.CustomAttribute.GetCustomAttributes(RuntimeType type, RuntimeType caType, Boolean inherit)
   at System.Attribute.GetCustomAttributes(MemberInfo element, Boolean inherit)
   at Seatbelt.Output.Sinks.VGV4dE91dHB1dFNpbmtB.InitializeCustomTextFormatters()
   at Seatbelt.Output.Sinks.VGV4dE91dHB1dFNpbmtB..ctor(SVRleHRXcml0ZXJB writer, Boolean filterResults)
   at Seatbelt.U2VhdGJlbHRB.OutputSinkFromArgs(String outputFileArg)
   at Seatbelt.U2VhdGJlbHRB..ctor(String[] args)
   at Seatbelt.UHJvZ3JhbUFB.Main(String[] args)

GUID not found

Hi, first of all, thank you for your hard work.
Second of all, I'm not very smart.
I would like to know why this error GUID not found ?

is it gonna work with .net 8?

Unhandled Exception: System.BadImageFormatException

Is this not compatible for .NET Core or console app? or just .NET Framework app?

Unhandled Exception: System.BadImageFormatException: Could not load file or assembly 'file:///D:\app.exe' or one of its dependencies. The module was expected to contain an assembly manifest.
   at System.Reflection.RuntimeAssembly._nLoad(AssemblyName fileName, String codeBase, Evidence assemblySecurity, RuntimeAssembly locationHint, StackCrawlMark& stackMark, IntPtr pPrivHostBinder, Boolean throwOnFileNotFound, Boolean forIntrospection, Boolean suppressSecurityChecks)
   at System.Reflection.RuntimeAssembly.InternalLoadAssemblyName(AssemblyName assemblyRef, Evidence assemblySecurity, RuntimeAssembly reqAssembly, StackCrawlMark& stackMark, IntPtr pPrivHostBinder, Boolean throwOnFileNotFound, Boolean forIntrospection, Boolean suppressSecurityChecks)
   at System.Reflection.RuntimeAssembly.InternalLoadFrom(String assemblyFile, Evidence securityEvidence, Byte[] hashValue, AssemblyHashAlgorithm hashAlgorithm, Boolean forIntrospection, Boolean suppressSecurityChecks, StackCrawlMark& stackMark)
   at System.Reflection.Assembly.LoadFrom(String assemblyFile)
   at yetAnotherObfuscator.Program.Main(String[] args) in D:\yetAnotherObfuscator\yetAnotherObfuscator\Program.cs:line 26