反编译工具

反编译DLL, exe (C#,C++)

  • 免费开源:

https://github.com/0xd4d/dnSpy release

微软工具 'C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.7.2 Tools\ildasm.exe'

  • 收费,闭源:

https://www.dll-decompiler.com/products.html

C# 代码混淆工具

https://github.com/0xd4d/de4dot

snowman

https://derevenets.com/


https://www.jetbrains.com/decompiler/

dotPeek   Free .NET Decompiler and Assembly Browser
https://www.jetbrains.com/resharper




ReSharper Ultimate:
a set of .NET tools and ReSharper C++ in one license

ReSharper Ultimate is a license that combines individual JetBrains .NET tools, as well as ReSharper C++.

Each ReSharper Ultimate license allows a single developer to use ReSharper, ReSharper C++, dotCover, dotTrace and dotMemory.

https://github.com/uxmal/reko

Reko is a binary decompiler. https://uxmal.github.io/reko

Decompile VC++

Boomerang
A general, open source, retargetable decompiler of machine code programs 
http://boomerang.sourceforge.net/



radare2
https://github.com/radare/radare2
https://radare.org/r/
https://radare.org/r/down.html





IDA pro 收费
交互式反汇编器专业版(Interactive Disassembler Professional),人们常称其为IDA Pro,或简称为IDA,是总部位于比利时列日市(Liège)的Hex-Rayd公司的一款产品。开发IDA的是一位编程天才,名叫Ilfak Guilfanov。十年前诞生时,IDA还是一个基于控制台的MS-DOS应用程序,这一点很重要,因为它有助于我们理解IDA用户界面的本质。除其他内容外,IDA的非Windows和非GUI版本仍然继续采用源于最初DOS版本的控制台形式的界面。
https://www.hex-rays.com/products/ida/index.shtml

hex-rays
https://www.hex-rays.com/products/decompiler/index.shtml

https://www.52pojie.cn/thread-450156-1-1.html

https://www.52pojie.cn/thread-886103-1-1.html IDA Pro7.0使用技巧总结
https://www.52pojie.cn/thread-648679-1-1.html IDA 7.0 显示中文字符串的方法

http://down.52pojie.cn/Tools/Disassemblers/IDA_Pro_v6.4_(Linux)_and_Hex-Rays_Decompiler_(ARM).zip


说明:
这个应该是目前Linux放出来最高正式版IDA 6.4,只有ARM的F5功能,上一个版本还要追溯到卡巴斯基泄露的5.7版本。
还记得前段时间windows版IDA 6.8是应该一位金山的同学上传百度网盘分享后导致泄露出来的吗,这次依葫芦画瓢也通过这样方法在互联网上搜索,不小心发小了这个小礼物,也是来自国内知名互联网公司的授权(给员工买IDA正版的公司都好公司),授权已经过期不能升级,估计会有人也搜到过,就当圣诞礼物,Merry Christmas!

文件修改:
由于是一个授权的版本,所以把4个对应的主程序进行了patch,去掉了局域网检测的校验,其他文件未作修改一起打包,由于文件较大,直接发给@Hmily 上传爱盘方便下载,如果你对原版感兴趣可以自己按照上面思路去找找,也许你会有新的发现。


64bit的linux若无法运行,请参考 http://www.hexblog.com/?p=958



Installing IDA 6.9 on Linux

IDA is still, as of this writing (December 23rd, 2015), a 32-bit application and both IDA & its installer(*) require certain 32-bit libraries to be present on your Linux system before they can run.

Here is the list of commands you will have to run in order to install those dependencies, for the following systems:

    Debian & derivative systems such as Ubuntu, Xubuntu, …
    Red Hat Enterprise Linux 7.2 (and likely other versions as well) 

Note: we cannot possibly install & try IDA on all flavors/versions of all Linux distributions, but we will do our best to update this post with relevant information, whenever we learn of a distribution requiring special attention.

(*) that is: if you want the installer to run a graphical interface, instead of a command-line one.
Debian & Ubuntu
Common dependencies

The following should allow IDA to run on most Linux systems deriving from Debian distributions:

sudo dpkg --add-architecture i386
sudo apt-get update
sudo apt-get install libc6-i686:i386 libexpat1:i386 libffi6:i386 libfontconfig1:i386 libfreetype6:i386 libgcc1:i386 libglib2.0-0:i386 libice6:i386 libpcre3:i386 libpng12-0:i386 libsm6:i386 libstdc++6:i386 libuuid1:i386 libx11-6:i386 libxau6:i386 libxcb1:i386 libxdmcp6:i386 libxext6:i386 libxrender1:i386 zlib1g:i386 libx11-xcb1:i386 libdbus-1-3:i386 libxi6:i386 libsm6:i386 libcurl3:i386 

Xubuntu 15.10

It is necessary to also run those commands, for IDA to present a usable GUI on Xubuntu 15.10

sudo apt-get install libgtk2.0-0:i386 gtk2-engines-murrine:i386 gtk2-engines-pixbuf:i386 

Red Hat Enterprise Linux 7.2

IDA will require the following packages to be installed, in order to run properly on RHEL 7.2 (and probably any other RPM-based distribution) :

redhat-lsb-core.i686
glib2.i686
libXext.i686
libXi.i686
libSM.i686
libICE.i686
freetype.i686
fontconfig.i686
dbus-libs.i686 



https://www.jb51.net/softs/580025.html
IDA Pro(反汇编工具) v7.0 Hex-Rays 绿色破解完整版 支持x64/x86

https://www.jb51.net/softs/655895.html
Apk Tool助手(APK文件反编译工具)V1.1 绿色免费版

使用

https://www.cnblogs.com/Antiver/p/10173474.html IDA Pro - 使用IDA Pro逆向C++程序

https://www.cnblogs.com/Antiver/p/10189055.html IDA Pro - 如何得到比较清楚的逆向伪代码

posted @ 2019-03-05 15:33  scott_h  阅读(1298)  评论(0编辑  收藏  举报