ILSpy review: a .NET decompiler
#1
Information 
ILSpy homepage: https://github.com/icsharpcode/ILSpy

ILSpy is a freeware and simple .NET decompiler which can be used also for example for static malware analysis of .NET malware samples, because we can see the source code of loaded .NET assemblies.

When we open ILSpy we can see the main window:


[Image: leNoajk.png]


To load a .NET assembly simply click to "File" menu and we can also save code and reload the decompiler:

[Image: EArvhz8.png]

If we click on "View" we can sort assembly list by name and we can search in the source code.

[Image: d0iHXuZ.png]

If we click on "Help" menu we can check for new updates or look at "About" window.

[Image: bT3bfzc.png]

We can decompile C#, VB and IL assemblies:

[Image: 5MbLGsA.png]

In the options we can set decompile settings, like "Decompile anonymous methods", "Decompile async methods", etc.

An interesting option we can see is that we can also show/hide XML documentation of the source code.

[Image: PuC8Ivw.png]

We can also set text style of the source code:

[Image: xsLwwWb.png]

You can set text size, show line numbers in the source code, show metadata tokens, enable word wrap and choose the font.

ILSpy latest release: https://github.com/icsharpcode/ILSpy/releases
[-] The following 4 users say Thank You to Deep900 for this post:
  • dhruv2193, harlan4096, jasonX, silversurfer
Reply
#2
Very nice there! Thanks for the review and info. There are tons of tools in GitHub and some really need more exposure!
[-] The following 3 users say Thank You to jasonX for this post:
  • Deep900, dhruv2193, harlan4096
Reply
#3
(11 January 19, 20:52)jasonX Wrote: Very nice there! Thanks for the review and info. There are tons of tools in GitHub and some really need more exposure!

Yes, that's a very good tool to view source code of .NET malware samples!
[-] The following 1 user says Thank You to Deep900 for this post:
  • harlan4096
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)
[-]
Welcome
You have to register before you can post on our site.

Username/Email:


Password:





[-]
Recent Posts
WinRAR 7.21 (stable release)
WinRAR 7.21 (stabl...harlan4096 — 08:18
Opera 31.0.5877.5
Dear Opera Users! ...harlan4096 — 08:17
Vivaldi 7.9 Build 3970.60
Vivaldi 7.9 Build ...harlan4096 — 08:16
PowerToys 0.99.1
Release v0.99.1 ...harlan4096 — 08:15
Is your car spying on you?
How law enforcemen...harlan4096 — 08:14

[-]
Birthdays
Today's Birthdays
avatar (74)divinenews
avatar (51)plajhunTat
Upcoming Birthdays
avatar (28)akiratoriyama
avatar (48)Jerrycix
avatar (40)awedoli
avatar (82)WinRARHowTo
avatar (38)owysykan
avatar (49)beautgok
avatar (39)axuben
avatar (45)talsmanthago
avatar (31)mocetor
avatar (46)piomaibhaict
avatar (51)kingbfef
avatar (38)izenesiq
avatar (45)centfootadoni
avatar (40)ihijudu
avatar (45)tiojusop
avatar (42)Damiennug
avatar (40)acoraxe
avatar (49)contjrat
avatar (41)axylisyb
avatar (44)tukrublape
avatar (41)iruqi
avatar (42)saitetib
avatar (36)ypasodiny
avatar (39)omapek
avatar (48)Geraldtuh
avatar (44)knigiJow
avatar (46)1stOnecal
avatar (50)Mirzojap
avatar (36)idilysaju
avatar (45)xclubDum
avatar (41)Stewartanilm
avatar (44)nikitaxople
avatar (40)GregoryRog
avatar (45)mediumog
avatar (40)odukoromu
avatar (46)Joanna4589
avatar (28)Honor6

[-]
Online Staff
There are no staff members currently online.

>