NETReactorSlayer icon indicating copy to clipboard operation
NETReactorSlayer copied to clipboard

Could not load type: Invalid Token After using this tool

Open MQREFP opened this issue 3 years ago • 16 comments

Describe the bug After cleaning through Net Reactor Slayer When we Compose SMS in Software. AT every character we enter software gives error.

Target obfuscated file https://workupload.com/file/Q2kgRpZY3Lv

Screenshots https://ibb.co/FWXMTPk

OS Version: Windows 11 64bit

MQREFP avatar May 16 '22 16:05 MQREFP

You should use preserve all metadata tokens option.

SychicBoy avatar May 16 '22 16:05 SychicBoy

I used it but same result

MQREFP avatar May 16 '22 16:05 MQREFP

So you should remove strong-name from assembly.

SychicBoy avatar May 16 '22 16:05 SychicBoy

Nope still same issue

MQREFP avatar May 16 '22 17:05 MQREFP

Which tool you used to remove strong-name?

SychicBoy avatar May 16 '22 17:05 SychicBoy

I use your tool net reactor slayer latest version but its not working. But I also used de4dot by mobile46 it's tool working properly with extra argument --dont-rename

MQREFP avatar May 16 '22 17:05 MQREFP

Here is the link of tool which is working properly https://github.com/mobile46/de4dot

MQREFP avatar May 16 '22 17:05 MQREFP

How you used my tool to remove assembly strong-name when it's doesn't have a feature to remove assembly strong-name?

https://forum.tuts4you.com/files/file/1353-removing-strongname-signature-in-net-applications/

SychicBoy avatar May 16 '22 17:05 SychicBoy

You should remove strong-name from file that deobfuscated by .NETReactorSlayer using a third-party tool.

SychicBoy avatar May 16 '22 17:05 SychicBoy

But in release 4.0 you have written that you added strong name removal protection

MQREFP avatar May 16 '22 17:05 MQREFP

strong-name removal protection is one of .NET Reactor protection features. This feature prevent assembly strong-name gets removed by third-parties.

SychicBoy avatar May 16 '22 17:05 SychicBoy

Oh now I understand

MQREFP avatar May 16 '22 17:05 MQREFP

Ok I will use third party tool and report you back

MQREFP avatar May 16 '22 17:05 MQREFP

Ok.

SychicBoy avatar May 16 '22 17:05 SychicBoy

I removed strong name Protection but problem still there so I checked it through dnspy and I found that method not deobfuscated correctly thats why its crashing. Picture link is here https://ibb.co/YTCKSV7

MQREFP avatar May 16 '22 18:05 MQREFP

Duplicate of #26

SychicBoy avatar May 16 '22 21:05 SychicBoy

@SychicBoy any update?

MQREFP avatar Aug 29 '22 09:08 MQREFP