dnSpyEx

dnSpyEx 6.19

.Net 逆向神器!

开心版 无广告 681

更新日期:2022年2月1日 分类标签: 语言:中文 平台:

历史版本(2) 115 人已下载 手机查看

更新说明:

dnSpy是一个非常好的项目,对我在.Net的逆向上提供了非常大的帮助,它的界面现代化,操作简单,虽然我还是一枚菜鸟,导致我无法熟练的使用它,但仍然无法否认它是我用过的最好的.Net的调试器。

出于某些原因作者自6.18版本后停止了更新,我从Github获得了.Net爱好者ElektroKill的维护版本dnSpyEx,我在其中加入了我个人喜欢的一些插件,后续我会持续将个人维护的整合版发布至此。

2022/2/1

新年快乐,这是我整合的第一个版本,具体变更如下:

  • NRefactory 的多项更新,这会使得 C# 的代码输出更清晰
  • 改进了 IL 反汇编器/反编译器。现在将显示更多信息。
  • 使用来自 ILSpy 存储库的最新更改来改进 BAML 反编译器。
  • 将 ICSharpCode.TreeView 更新到最新版本
  • 在顶部和底部附近拖动树视图项目将滚动树视图
  • 改进了 .NET Core 和 .NET 5 的程序集分辨率
  • 改进的异步方法反编译
  • 增加HoLLy扩展,它提供以下功能:
    • 更改类型、方法、属性或字段的显示符号名称,而无需修改二进制文件。这些修改后的名称保存在一个 xml 文件中,这意味着您可以编写一个工具来自动生成它们。
    • 请记住,这是一种相对笨拙的方式,它不能被视为手动重命名符号的完美替代品。有关限制,请参阅当前问题。
    • 将托管 (.NET) DLL 注入调试的进程。注入的 DLL 必须有一个带有签名的方法static int Method(string argument)。.NET Core 和 Unity x64 尚不支持。
    • 反汇编原生函数
    • 显示托管函数和本机函数的控制流图
    • 在树视图中为托管程序集添加下划线。
    • 在调试模式下帮助扩展开发的几个命令
  • 增加DotNet Universal Patcher扩展,这是一个适用于.net的patch工具,我把它放在了dnSpy主程序同级别的Tools目录,以后我可能还会扩充这个目录便于使用。工具的用法我传到了B站。传送门

dnSpy is a debugger and .NET assembly editor. You can use it to edit and debug assemblies even if you don't have any source code available. Main features:

  • Debug .NET and Unity assemblies
  • Edit .NET and Unity assemblies
  • Light and dark themes

See below for more features

dnSpyEx dnSpyEx

Binaries

https://github.com/dnSpy/dnSpy/releases

Building

git clone --recursive https://github.com/dnSpy/dnSpy.git
cd dnSpy
# or dotnet build
./build.ps1 -NoMsbuild

To debug Unity games, you need this repo too: https://github.com/dnSpy/dnSpy-Unity-mono (or get the binaries from https://github.com/dnSpy/dnSpy/releases/unity)

Debugger

  • Debug .NET Framework, .NET and Unity game assemblies, no source code required
  • Set breakpoints and step into any assembly
  • Locals, watch, autos windows
  • Variables windows support saving variables (eg. decrypted byte arrays) to disk or view them in the hex editor (memory window)
  • Object IDs
  • Multiple processes can be debugged at the same time
  • Break on module load
  • Tracepoints and conditional breakpoints
  • Export/import breakpoints and tracepoints
  • Call stack, threads, modules, processes windows
  • Break on thrown exceptions (1st chance)
  • Variables windows support evaluating C# / Visual Basic expressions
  • Dynamic modules can be debugged (but not dynamic methods due to CLR limitations)
  • Output window logs various debugging events, and it shows timestamps by default 🙂
  • Assemblies that decrypt themselves at runtime can be debugged, dnSpy will use the in-memory image. You can also force dnSpy to always use in-memory images instead of disk files.
  • Public API, you can write an extension or use the C# Interactive window to control the debugger

Assembly Editor

  • All metadata can be edited
  • Edit methods and classes in C# or Visual Basic with IntelliSense, no source code required
  • Add new methods, classes or members in C# or Visual Basic
  • IL editor for low-level IL method body editing
  • Low-level metadata tables can be edited. This uses the hex editor internally.

Hex Editor

  • Click on an address in the decompiled code to go to its IL code in the hex editor
  • The reverse of the above, press F12 in an IL body in the hex editor to go to the decompiled code or other high-level representation of the bits. It's great to find out which statement a patch modified.
  • Highlights .NET metadata structures and PE structures
  • Tooltips show more info about the selected .NET metadata / PE field
  • Go to position, file, RVA
  • Go to .NET metadata token, method body, #Blob / #Strings / #US heap offset or #GUID heap index
  • Follow references (Ctrl+F12)

Other

  • BAML decompiler
  • Blue, light and dark themes (and a dark high contrast theme)
  • Bookmarks
  • C# Interactive window can be used to script dnSpy
  • Search assemblies for classes, methods, strings, etc
  • Analyze class and method usage, find callers, etc
  • Multiple tabs and tab groups
  • References are highlighted, use Tab / Shift+Tab to move to the next reference
  • Go to the entry point and module initializer commands
  • Go to metadata token or metadata row commands
  • Code tooltips (C# and Visual Basic)
  • Export to project

List of other open source libraries used by dnSpy

  • ILSpy decompiler engine (C# and Visual Basic decompilers)
  • Roslyn (C# and Visual Basic compilers)
  • dnlib (.NET metadata reader/writer which can also read obfuscated assemblies)
  • VS MEF (Faster MEF equals faster startup)
  • ClrMD (Access to lower level debugging info not provided by the CorDebug API)
  • Iced (x86/x64 disassembler)

Translating dnSpy

Click here if you want to help with translating dnSpy to your native language.

Wiki

See the Wiki for build instructions and other documentation.

License

dnSpy is licensed under GPLv3.

Credits

历史版本

版本
日期
大小
状态
语言
下载
6.19最新
2022年2月1日
开心版
中文
6.18
2020年12月8日
官方版
中文

相关软件

RunningCheese Chrome
RunningCheese Chrome 是一款提高 Chrome 易用性的定制版浏览器,可以为你在工作学习上提供极大的便利。
x64dbg
An open-source x64/x32 debugger for windows.
NetReactorSlayer
用于Eziriz .NET Reactor的开源(GPLv3)反重组器
RunningCheese Edge
时隔两年,微软终于推出了 Edge 浏览器正式版,那条搅动浏览器市场的“鲶鱼”也终于出现了。
小丸工具箱
小丸工具箱是一款用于处理音视频等多媒体文件的软件。是一款x264、ffmpeg等命令行程序的图形界面。它的目标是让视频压制变得简单、轻松。
DirectX Repair
DirectX修复工具

暂无评论

暂无评论...