Obfuscators

[chemicalNova]

Howdy all,

I was wondering if anyone knew a free obfuscator for .NET applications? All the ones I can find are quite expensive, and I have no money with which to purchase one.

Either that, or some way to protect my applications from being viewed. I was told about a certain program which can break down any .NET application back into source code, so I tried it on my application.

It was quite scary what I saw. In the executable all of the variable names were correct, and the code looked exactly as it did in Visual Studio. The DLL looked exactly the same too, except the variable names were re-done (a DirectoryInfo variable was shown as "info1").

So does anyone have any suggestions for me to obfuscate my apps or make them un-decompilable altogether? For free?

Thanks in advance

chem

[Al42]

Write them in assembly.

[chemicalNova]

Write them in assembly.

Nice and simple, I like it

If the apps weren't so complicated, I may be able to write them in Assembly, but that isn't an option at the moment

There are programs out there, that make .NET applications impossible to decompile..but they all just cost an arm and a leg.

No one knows of any free ones?!

chem

[RobDog888]

Under the Tools menu of 2005 is the Dotfusicator Community Edition. Free but not the same as expensive obfusicators.

[chemicalNova]

I'm using an Express Edition. I googled Dotfuscator but theres only trial versions available

chem

[Hack]

I couldn't find any free one's either.

It might just come down to whether the expense of purchasing one is more potentially expensive than not purchasing one.

[RobDog888]

Also, if your apps are something that hackers will want to spend the time on getting the code or not. If its freeware or shareware then no. If its commercial and the price is substancial or its very popular then yes.

[chemicalNova]

The application is a small anti-cheat solution for online games. Basically, it takes random screenshots throughout the game and saves them to a file. What I don't want, is for someone to be able to view the code which renders these files, and be able to decompile their own rendered files, and either remove or change the frames which they were caught cheating. The reason I want it is because the application is now being used in 4 Australian Online Gaming leagues, one such league is sponsored by CEVO. Viewing the source could be a problem

..not that many FPS gamers are that smart..but still

chem

[RobDog888]

Perhaps you could get them to help out with some funds for the obfuscator costs?

[chemicalNova]

Perhaps you could get them to help out with some funds for the obfuscator costs?

Mmmm. Its worth a try I suppose. Thanks for the help Rob

chem

[RobDog888]

Go in with the attitude that you are selling the concept to them and that they do need it. Also, that it will be a good investment as they can use it on other apps or future apps.

Maybe if you tell them that you will go in halfers with them but you will retain the ownership of it or something?

[Hack]

Or, you could just sell it to them outright and let them worry about the security issues.

[Shaggy Hiker]

I agree that you have all the leverage you need to get somebody to pay for a good obfuscator. If people want to prevent cheating enough to use your program, then they should be willing to kick in a tiny amount to make sure that cheating is actually prevented. There is a cost to this, they just have to decide whether or not it is worth it. From my experience with FPS gamers, they probably wouldn't notice the small price of buying such a thing wrapped in. Just tell them it gives them XP.

[chemicalNova]

The problem is 3 of the 4 leagues couldn't remotely pay for the Obfuscator. The CEVO sponsored one may be able to, but its a very long shot.

I'll talk to them and see. I love your idea Hack, might even come to that too

chem

[RobDog888]

Yes, if you tell them that if they dont buy it that the hackers could see how the cheat works and figure a way to circumvent it. Rendering the anticheat virtually useless. Basically, CYA.

[chemicalNova]

I see your point.

I'll let you guys know how it goes

chem

[Slaine]

If you are going down the paid route then I would recommend spices from 9rays.net.

I've been using it for a while now and it is excellent, as well as being very competitively priced. The support is also superb.

BTW I have no connection with them, just a friendly recommendation.

Alternatively - try to find someone who has one and ask them to do the obfuscation for you.

[RobDog888]

Slaine, do you have any links to free ones?

[Hack]

Slaine, do you have any links to free ones?

I couldn't find free ones through Google so if there are some out there, I'd be interested as well.

[RobDog888]

The only free one I have seen so far is the "Dotfusicator Community Ediion" which is in my Team Suite version. Just need to look it up to see which versiion it starts to come with.

[Slaine]

If there are any free one out there they are well hidden!

When I was tasked with finding an obfuscator for our coding shop I spent a fair amount of time searching and evaluating all the products I could.

And I'm sorry to say I never found a decent free one.

I did find a couple that were almost cheap enough to be considered free however - but they tend to be severly lacking with respect to the high end obfuscators.

Dynu .NET obfuscator

Obfuscating .NET: Protecting your code from prying eyes
This one is a book, but comes with the source code for an open source obfuscator. Apparently the use of the code is licensed only to those who have the book.

Apose.Obfuscator
This one appears to be free but the website is so unstable I am unable to get much information.