Italiano | English

FORUM |  BLOG
Friday, 03-Sep-2010
of Geom. Marcello Cantelmo :: C.C.I.A.A.: LECCE • R.E.A.: 241514 • P.IVA: IT-03733730752
 
:: Featured
 THANK YOU! FOR CHOOSING TO EVALUATE: "GOLIATH .NET OBFUSCATOR"
  • Are you aware that when you distribuite your .NET application, you have also been delivering (involuntarily!) your source code?

  • .NET = Open-Source ?

  • Developers are having to face the issueCOPYRIGHT vs. SOFTWARE PATENTS. Shortly:
    - the software, protected by the copyright, is at risk of "
    Decompilation";
    - the "absolute monopoly" on using an idea (
    software patents) is way too expensive;
 VULNERABILITY OF THE OBFUSCATORS PRESENT IN .NET BUSINESS:

.NET OBFUSCATOR PRODUCER PRICE
SINGLE LICENCE
TEST OBFUSCATOR
Aspose Obfuscator Aspose Pty Ltd * F R E E * Our Brain vs Aspose Obfuscator 12
Demeanor Obfuscator WiseOwl Inc. 799,00 $ Our Brain vs Demeanor Obfuscator 1
Desaware QND Obfuscator Desaware Inc. * F R E E +src * Our Brain vs Desaware QND Obfuscator 1, 23
Dotfuscator (incluso in VS.NET) PreEmptive Solution until to: 1.890,00 $ Our Brain vs PreEmptive Dotfuscator 1
Dynu .NET Obfuscator Dynu System Inc. until to: 499,00 $ Dynu Obfuscator DLL = Desaware QND DLL !?! [:-o]
Salamander .NET Obfuscator Remotesoft until to: 1.399,00 $ Our Brain vs Salamander Obfuscator 1
Spices .NET Obfuscator 9Rays.net 492,95 $ Our Brain vs Spices Obfuscator 12
Xenocode Obfuscator Xenocode Corporation until to: 1.499,00 $ Our Brain vs Xenocode Obfuscator 1
Crypto Obfuscator LogicNP Software until to: 4.469 $ ABSURD! for a Protection Tool:
products protected with other obfuscator
1
...WHAT HAPPENS IF YOU USED DERIVATIVES PRODUCTS?

Goliath. NET Obfuscator is the first product (since 2005: "licenses sold to the hand") that use the technique called 
spaghetti code (control-flow) for the confusion of the .NET code. However, other products, considered efficacious only the "renaming of symbols"!

At a distance of 5 years -from the first release- you see *only* clones obfuscator. How many times said: is easy to do business with "ideas" of others! Instead of "decompiling" a program -ours competitors- have copied directly to the "final idea" (you read: "control-flow"). We are enforced to patent ideas?
Babel Obfuscator 2.0/3.0/3.5
(/unpack:1)
--- --- Automatic removal of: Invalid opcode, ControlFlow e Decryption String (without re-coded algo). Other information...
Eazfuscator 2.5.15.8428
(/unpack:2)
--- --- Automatic removal of: ControlFlow.
Reflector Pro 6.0.294 Deploy --- --- Automatic removal of: {sa} Anti-disassembler & Anti-decompiler. The Control-Flow is equal to others!
continue...
The old "control-flow" is now *obsolete* and the new "core-engine" of Goliath .NET Obfuscator 4.x is thus evolved from being able to remove the protection implemented by "clones":

...WITH THE RESULT THAT-NOW-YOUR CODE IS ALREADY OF ANOTHER COMPETITORS!!!

[*] To remove the protection of "clones" (also using the DEMO version): goliath assembly.ext /UNPACK:number


THE SECRET BECOMES PUBLIC
The Protection Scheme of Goliath. NET Obfuscator!

  • Symbols Renaming
  • String Encryption
  • Evolution of the "Control-Flow" Obfuscation (Spaghetti-Code)
  • Invalid Opcode (...and "clones" of Goliath .NET Obfuscator): PREVIEW

IT WAS NOT CONSIDERED REALLY THE PROBLEM OF "REVERSE-ENGINEERING OF .NET APPLICATION"

...UNTIL TODAY THERE "THE ILLUSION" THAT HE WAS PROPERLY OBFUSCATING YOUR SOFTWARE!

As shown, without any "effort" (... and using *only* free products), it was possible, "analyze and avoid" the various measures of protection!

The analysis performed on the current obfuscators emphasized that although the names of the methods, properties and variables have been altered (so as not to understand "immediately" the logic of the project), a program:
  1. can work without problems;
  2. can be designed to "circumvent" any licensing systems (creation of so-called "keygen");
  3. can be studied and used to generate "similar" products;
  4. etc.
In addition to a possible Decompiler, thanks utility called ILDASM (IL Disassembler) contained in VS .NET, you can view the MSIL code contained in an assembly. With some obfuscator of the above, it is also possible to stop ILDASM. At disassembling, the following screen appears:



This technique is absolutely useless! Control matching data in file is executed from "ILDASM"! An attacker could *Disassembe and Manipulate*, at will, the executable "ILDASM.exe" and bypass this type of protection! Cantelmo Software considered important to mention that fact in order not to prove to developers, a false sense of security!


 VULNERABILITY OF THE "SECURITY by OBSCURITY" (N.B.: cannot to obfuscate an single .DLL)

EMBEDDED .NET
.EXE + *.DLL = .EXE
PRODUCER PRICE
SINGLE LICENCE
REVERSING EMBEDDED
TEST OF 2005
Deploy .NET Jungle Creatures Inc. 750,00 $ Our Brain vs Deploy .NET 1
tabella non definitiva...




To secured the .NET Code isn't enough only "to hide" one or more assemblies as "resource files". A static "loader" (...and badly obfuscated) facilitates an aggressor in the creation of automatic "unpacker"!


 
VULNERABILITY OF .NET CRYPTER'S

.NET CRYPTER PRODUCER PRICE
SINGLE LICENCE
REVERSING CRYPTER
TEST OF 2005
CodeVeil 1.x Xheo Inc. fino a: 1.199,99 $ Our Brain vs. CodeVeil 1
continue...




To secured the .NET Code isn't enough only "to crypt" Meta-Data, Resources, and Strings. Obtain the .NET code ("clear") directly from memory, can "render ineffective," the most modern cryptographic techniques!


FINAL CONSIDERATION:
  • COMPILERS OF .NET PLATFORM *NOT* GENERATING NATIVE CODE!
  • FOR THE NATURE OF THE .NET CODE, UNFORTUNATELY, THERE IS NO PROTECTION 100% SAFE. ANYONE SAYS OTHERWISE ISN'T BE TAKEN SERIOUSLY!
Cantelmo Software, with your products of Security Line "GOLIATH .NET", provides to the Developers effective tool (LOW PRICE) to protect the Intellectual Property of .NET Code


ALL PRODUCTS SOFTWARE SECURITY LINE "GOLIATH .NET"
Home Page:Services:Solutions:Customers:Products:Company

Copyright © 2003-2010 "Cantelmo Software" del Geom. Marcello Cantelmo. All rights reserved • Legal Notes
: Made with Nvu :

: : Use OpenOffice.org :
Microsoft™, Windows™, .NET™, and .NET Framework™ sono marchi di Microsoft Corporation. Tutti gli altri marchi appartengono ai legittimi proprietari.