当前位置: 首页 > 微软应用 > 网络软件 > 正文
开源 .Net 反汇编工具 dnSpy 6.4.0 + x64 中文绿色免费版

开源 .Net 反汇编工具 dnSpy 6.4.0 + x64 中文绿色免费版

作者:大眼仔~旭 日期:1个月前 (06-20) 评论:2 条

摘要:.Net 反汇编工具 dnSpy + x64 中文绿色版由大眼仔旭(www.dayanzai.me)发布。dnSpy 是一款针对 .NET 程序的逆向工程工具,基于 ILSpy 发展而来的 .Net 程序集的编辑,反编译,调试神器。。该项目包含了反编译器,调试器和汇编编辑器等功能组件,而且可以通过自己编写扩展插件的形式…

.Net 反汇编工具 dnSpy + x64 中文绿色版大眼仔旭(www.dayanzai.me)发布。dnSpy 是一款针对 .NET 程序的逆向工程工具,基于 ILSpy 发展而来的 .Net 程序集的编辑,反编译,调试神器。。该项目包含了反编译器,调试器和汇编编辑器等功能组件,而且可以通过自己编写扩展插件的形式轻松实现扩展。该项目使用 dnlib 读取和写入程序集,以便处理有混淆代码的程序(比如恶意程序)而不会崩溃。

dnSpy 绿色中文版

dnSpy 绿色中文版

dnSpy 主要功能

调试器

  • 调试 .NET Framework、.NET 和 Unity 游戏程序集,无需源代码
  • 设置断点并单步执行任何程序集
  • 位置、查看器、自动窗户
  • 变量窗口支持将变量(例如解密的字节数组)保存到磁盘或在十六进制编辑器(内存窗口)中查看它们
  • 对象 ID
  • 可以同时调试多个进程
  • 模块负载中断
  • 跟踪点和条件断点
  • 导出/导入断点和跟踪点
  • 调用堆栈、线程、模块、进程窗口
  • 抛出异常时中断(第一次机会)
  • 变量窗口支持评估 C#/Visual Basic 表达式
  • 可以调试动态模块(但由于 CLR 限制不能调试动态方法)
  • 输出窗口记录各种调试事件,默认显示时间戳:)
  • 可以调试在运行时自行解密的程序集,dnSpy 将使用内存中的映像。 您还可以强制 dnSpy 始终使用内存中的映像而不是磁盘文件。
  • 公共API,您可以编写扩展或使用C# Interactive 窗口来控制调试器

汇编编辑器

  • 所有元数据都可以编辑
  • 使用 IntelliSense 在 C# 或 Visual Basic 中编辑方法和类,无需源代码
  • 在 C# 或 Visual Basic 中添加新方法、类或成员
  • 用于低级 IL 方法体编辑的 IL 编辑器
  • 可以编辑低级元数据表。 这在内部使用十六进制编辑器。

十六进制编辑器

  • 点击反编译代码中的某个地址,即可在十六进制编辑器中转到其 IL 代码
  • 与上述相反,在十六进制编辑器的 IL 主体中按 F12 可转到反编译代码或位的其他高级表示。 很高兴找出补丁修改了哪条语句。
  • 重点介绍 .NET 元数据结构和 PE 结构
  • 工具提示显示有关所选 .NET 元数据/PE 字段的更多信息
  • 转到位置、文件、RVA
  • 转到 .NET 元数据标记、方法主体、#Blob / #Strings / #US 堆偏移量或 #GUID 堆索引
  • 遵循参考文献 (Ctrl+F12)

其他

  • BAML 反编译器
  • 蓝色、浅色和深色主题(以及深色高对比度主题)
  • 书签
  • C# 交互式窗口可用于编写 dnSpy 脚本
  • 在程序集中搜索类、方法、字符串等
  • 分析类和方法的使用情况,查找调用者等
  • 多个选项卡和选项卡组
  • 引用突出显示,使用 Tab / Shift+Tab 移至下一个引用
  • 转到入口点和模块初始化命令
  • 转到元数据标记或元数据行命令
  • 代码工具提示(C# 和 Visual Basic)
  • 导出到项目

dnSpy 使用的其他开源库列表

  • ILSpy 反编译器引擎(C# 和 Visual Basic 反编译器)
  • Roslyn(C# 和 Visual Basic 编译器)
  • dnlib(.NET 元数据读取器/编写器,也可以读取混淆的程序集)
  • VS MEF(更快的 MEF 等于更快的启动)
  • ClrMD(访问 CorDebug API 未提供的较低级别调试信息)
  • Iced(x86/x64 反汇编程序)

.net 反编译工具 Dnspy 开发人员可以使用它反编译 .NET 代码,以了解它是如何工作的,学习或指导 .NET 语言的复杂性,提供一个更好的替代库的文档,恢复丢失或不可用的源代码,定位性能问题,分析依赖关系,检查混淆

支持.NET1.0, 2.0,.NET 3.5,.NET 4.0等

还记得 Spy++ 吗?在 Win32 时代,这个软件对于我们分析一个陌生软件的设计思路可谓立下汗马功劳。在如今的 .NET 时代,Reflector 又成为每个严肃的 .NET 开发人员工具箱中必不可少的精髓工具之一。怎么样,请赶紧试锋吧。

同时界面采用 VS 2015 的风格,重点是开源的,可以随便进行 DIY。代码高亮酷炫,实在是逆向神器。

官方主页

New features:
All distributions of dnSpyEx now support resolving Windows shortcut files (*.lnk) when they are dragged onto the assembly explorer.
Extended the export to project feature by adding support for unpacking multi-element resources back to .resx source files
Introduce two additional options to the Save Module dialog. (AddMvidSection and ForceBigColumns)
Added a new menu command to copy the full name of any metadata member.
Add support for horizontal scrolling with the shift key in the text and hex editors.
Add support for multiline copy and paste to the text editor.
Added support for .url shortcut files and modified the code to recursively resolve shortcuts until a target file is reached.
ILSpy Decompiler:
Display custom attributes defined on interface implementations in the IL disassembly
Add IL with C# decompiler language which annotates the IL disassembly with comments showing the higher level C# statements above the IL code responsible for them.
Show field initial value for simple primitive types in a comment located above the field declaration.
Added a new decompiler option to disable the insertion of unnecessary parenthesis.
Reworked BAML disassembler:
Heavily improved syntax highlighting and other editor features like indent guides and brace pair highlighting.
Add local jump to reference for BAML attribute, type, etc. declaration records.
Add support for dnSpy’s number tooltips in the disassembler.
Introduce tooltips for type, assembly, property, and resource references.
Improved performance and memory efficiency.
Improvements and bug fixes:
Fixed regular non-publish .NET 6 debug and release dnSpy builds, they no longer crash on startup and now also use the correct x86 icon when applicable.
Fixed a commonly occurring NullReferenceException when editing event definitions using the assembly editor component.
Improved Chinese translation by @Wenveo
Fixed incorrect handling of __arglist parameter in the Edit in C#/Edit in VB options.
Fix incorrect display of VarArg and NativeVarArg in the signature editing dialog.
Properly handle Unmanaged calling convention across the dnSpyEx code base.
Fixed incorrect escaping behavior when displaying strings found in embedded resources.
Refresh search results when the scope of the search operation is changed (e.g. a different file is selected and the search mode is set to the selected file)
Fixed C# and VB tooltips for types with uninstantiated generic parameter signatures.
Escape Hangul Filler characters and other similar whitespace characters that were previously not escaped across the dnSpyEx UI.
Use reference assemblies for the compiler in the Edit in C#/Edit in VB options to fix issues with incorrect assembly references being emitted when editing .NET Standard or .NET Core assemblies.
Added a workaround for a bug in WPF WindowChromeWorker that caused OverflowException to be thrown for invalid hittest window messages.
Correctly set the available options based on the window state in the Windows Alt + Space menu.
Improved .NET Standard assembly resolution to prioritize exact version match over the latest available version.
Fixed a bug that resulted in the ability of the user to infinitely scroll horizontally.
Fix an issue in the new RESX writer which resulted in incorrectly generated RESX for resources with user serialized types.
ILSpy Decompiler:
Fixed multiple NRE’s that occurred when decompiling heavily obfuscated property metadata.
Fixed an issue that caused incorrect dynamic types to be introduced for method parameters.
Improved type inference for calli instructions as well as stores to readonly auto-properties.
Fixed several issues relating to the decompilation of member names containing a . character.
Display custom attributes in the same order that they appear in metadata by default.
Improved performance and memory efficiency.
Debugger:
Fixed certain expressions in the Watch and Locals window being incorrectly syntax highlighted.
Fixed a bug that prevented the Show Raw Locals option from working when the Roslyn EE failed to initialize due to invalid metadata.
Fixed a bug that prevented the DebuggerDisplayAttribute evaluator from working as intended.
Several improvements to the built-in IL interpreter and function evaluator aimed at improving performance and accuracy.
Fixed type name parsing issues which lead to the debugger incorrectly resolving custom attributes, security declarations, and some marshal blobs.
Improve the Show in memory command for objects in the locals and watch windows.
Improve the display of method names in the Call stack window. __arglist, dynamic, nint, nuint and tuple element names are now properly displayed.
Added an anti-anti-debug option to prevent the malicious use of NtRaiseHardError to trigger kernel faults (blue screens of death).
Added an anti-anti-debug option to prevent the detection of the debugger using a call to CloseHandle with an invalid handle.
Update Roslyn debugger intrinsic handling to match what is expected by Roslyn 4.6.0
CorDebug:
Improved loading of dynamic modules (fixed issues with thread safety and added code to fetch more metadata from the CorDebug API)
Fallback to COM-based metadata reading when the in-memory metadata is corrupted (e.g. anti-dumping protection)
Display COM error code when the debugger fails to start.
Made the timeout for CoreCLR debugger initialization configurable.
Display the HRESULT when attaching the CoreCLR debugger fails.
Improve support for debugging of single file bundle files which do not contain the required debugging components by trying to load them from the locally installed .NET installations.
Mono:
Improved loading of obfuscated modules when debugging
Fixed several issues related to the resolution of method definitions on newer debugger protocol versions
Fixed an unhandled AggregateException when connecting to a Unity debuggee (by @UlyssesWu).
Display the IP and port used to connect to the debuggee in the output window.
Improve loading of metadata from in-memory modules.
BAML decompiler:
Fixed resolution of PresentationFramework when it was referenced using its special ID 0xFFFF.
Lazily resolve known XAML types, properties, and other members to increase performance.
Improve extraction of BAML connection ID information to work without all dependency assemblies and in other edge cases.
Fixed an issue that resulted in dnSpy introducing markup extensions in cases where they were not syntactically valid.
Properly place markup extension arguments containing spaces in single quotes.
Fix issues regarding incorrect or missing escaping from markup extensions.
Fixed crashes caused by the UI’s WPF markup extension parser when it encountered invalid syntax.
Fix a bug that caused XAML paths to lack a Z character at the end.
Improved support for markup extensions where their classes inherit from generic classes.
Improved support for nested types within XAML markup extensions.

资源:1499.rar
解压密码:www.dayanzai.me
转载请保留出处,谢谢合作~
点击下载(提取码:3fvg)
点击下载(提取码:536766)
点击下载(提取码:536766)
点击下载(提取码:bt2j)

声明:大眼仔旭 | 本文采用署名-非商业性使用-相同方式共享 4.0 国际许可协议[CC BY-NC-SA]进行授权
文章名称:《开源 .Net 反汇编工具 dnSpy 6.4.0 + x64 中文绿色免费版
文章固定链接:http://www.dayanzai.me/dnspy.html
本站资源仅供个人学习交流,请于下载后 24 小时内删除,不允许用于商业用途,否则法律问题自行承担。
转载声明
全部评论: (2条)
  1. 舞洛2019-03-21 21:08 回复
    这个全局搜索怎么用,搜索特征文字
  2. hk2020-07-05 09:36 回复
    非常感谢分享 非常好用!

发表评论

返回顶部