Dismiss this notice
Thor Foresight Home Halloween 2019 Giveaway - https://www.geeks.fyi/showthread.php?tid=8636

Dismiss this notice
Avast Premier Halloween 2019 Giveaway - https://www.geeks.fyi/showthread.php?tid=8637

Dismiss this notice
Kryptel Standard Halloween 2019 Giveaway - https://www.geeks.fyi/showthread.php?tid=8635

Dismiss this notice
Driver Easy Professional Halloween 2019 Giveaway - https://www.geeks.fyi/showthread.php?tid=8634

Dismiss this notice
O&O Software Halloween 2019 Giveaway - https://www.geeks.fyi/showthread.php?tid=8633

Dismiss this notice
Ashampoo WinOptimizer 17 Halloween 2019 Giveaway - https://www.geeks.fyi/showthread.php?tid=8626

Dismiss this notice
AIDA64 Extreme Halloween 2019 Giveaway - https://www.geeks.fyi/showthread.php?tid=8625

Dismiss this notice
Ashampoo Movie Studio Pro 3 Halloween 2019 Giveaway - https://www.geeks.fyi/showthread.php?tid=8624

Dismiss this notice
AirVPN Halloween 2019 Giveaway - https://www.geeks.fyi/showthread.php?tid=8623

Thread Rating:
  • 2 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
ILSpy review: a .NET decompiler
#1
Information 
ILSpy homepage: https://github.com/icsharpcode/ILSpy

ILSpy is a freeware and simple .NET decompiler which can be used also for example for static malware analysis of .NET malware samples, because we can see the source code of loaded .NET assemblies.

When we open ILSpy we can see the main window:


[Image: leNoajk.png]


To load a .NET assembly simply click to "File" menu and we can also save code and reload the decompiler:

[Image: EArvhz8.png]

If we click on "View" we can sort assembly list by name and we can search in the source code.

[Image: d0iHXuZ.png]

If we click on "Help" menu we can check for new updates or look at "About" window.

[Image: bT3bfzc.png]

We can decompile C#, VB and IL assemblies:

[Image: 5MbLGsA.png]

In the options we can set decompile settings, like "Decompile anonymous methods", "Decompile async methods", etc.

An interesting option we can see is that we can also show/hide XML documentation of the source code.

[Image: PuC8Ivw.png]

We can also set text style of the source code:

[Image: xsLwwWb.png]

You can set text size, show line numbers in the source code, show metadata tokens, enable word wrap and choose the font.

ILSpy latest release: https://github.com/icsharpcode/ILSpy/releases
[-] The following 4 users Like Deep900's post:
  • dhruv2193, harlan4096, jasonX, silversurfer
Reply
#2
Very nice there! Thanks for the review and info. There are tons of tools in GitHub and some really need more exposure!
[-] The following 3 users Like jasonX's post:
  • Deep900, dhruv2193, harlan4096
Reply
#3
(11 January 19, 20:52)jasonX Wrote: Very nice there! Thanks for the review and info. There are tons of tools in GitHub and some really need more exposure!

Yes, that's a very good tool to view source code of .NET malware samples!
[-] The following 1 user Likes Deep900's post:
  • harlan4096
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)
[-]
Welcome
You have to register before you can post on our site.

Username:


Password:





[-]
Recent Posts
GFYI [Official] Ashampoo WinOptimizer 1...
"Why do you nee...divinenews — 03:21
Ashampoo UnInstaller 9 upgrade
Meet the next gene...Toligo — 21:34
Facebook’s iOS app might be opening the ...
Facebook might hav...Toligo — 21:28
Intel's Cascade Lake CPUs impacted by ne...
he Zombieload vuln...Toligo — 21:26
Orcus RAT Author Charged in Malware Sche...
The accused, 36-ye...Toligo — 21:24

[-]
Birthdays
Today's Birthdays
No birthdays today.
Upcoming Birthdays
avatar (34)idilamoz
avatar (51)Stefanos

[-]
Online Staff
There are no staff members currently online.

>