Top Tweets for #asmresolver

about 1 month ago

#AsmResolver 6.0.0 is finally here! - Support for more PE architectures - Supercharged .NET multi-assembly processing - Compatible with NixOS and legacy .NET FX 3.5 - Many API improvements - Massive performance boosts 👉https://t.co/ZTWZy2WKPc #pe #dotnet #reversing #malware

0

72

17

26

4K

9 months ago

#AsmResolver 6.0.0-beta.4 released! This release addresses many shortcomings found during beta.3, including ARM32 and ARM64 support, auto references importing, and many other DX improvements. 👉 Get it on GitHub or NuGet: https://t.co/TOGjkEoti9 #dotnet #pe #reversing

0

15

2

1

914

over 1 year ago

#AsmResolver 6.0.0-beta.3 just got pushed to NuGet! More bugs were found and squashed. We are closing in on a full release with most of the public API being stable. Get it on GitHub or NuGet👉 https://t.co/DnyY3iS19s #dotnet #pe #reversing

0

30

5

3

3K

over 1 year ago

#AsmResolver 6.0.0-beta.2 has been released This is a maintenance release that addresses many regressions introduced by the refactors in 6.0.0-beta.1. Get it on NuGet or GitHub 👉https://t.co/EMFp6aDuir

0

29

7

4

3K

about 2 years ago

The first beta of #AsmResolver 6.0.0 has just been released. This comes with many long-awaited features, including #dotnet mixed mode and fully unmanaged #PE file building, runtime contexts and compatibility with legacy .NET Framework 3.5. 👉 https://t.co/HjkbS6maUi

2

42

14

13

8K

about 2 years ago

Where and when can I claim my paycheck of nearly $3,000,000 @boyter? Do you do payouts in USD? BTC? Pizzas? Cute/funny cat pictures? Let me know what works best for you. (trying https://t.co/YDKAPQJFva on #asmresolver 😆)

washi_dev's tweet photo. Where and when can I claim my paycheck of nearly $3,000,000 @boyter? Do you do payouts in USD? BTC? Pizzas? Cute/funny cat pictures? Let me know what works best for you.

(trying https://t.co/YDKAPQJFva on #asmresolver 😆) https://t.co/gvUiQlTy6c

1

8

0

1

856

over 2 years ago

#AsmResolver 5.5.1 is out! This is a maintenance release, adding #dotnet 8.0 targets and fixes issues related to type signatures, CIL optimizations, as well as some rare edge cases in .NET metadata directory parsing. Get it on GitHub/NuGet: 👉 https://t.co/SKharPUyxy

0

21

4

1

1K

over 2 years ago

I got so excited about the new addition to #AsmResolver supporting #ReadyToRun that I created a simple PoC using #PowerShell #AsmResolver #Iced showing the method name, token, IL code, and the pre-compiled disassembly🥳 Great job @washi_dev 👏🤗🙏 Gist: https://t.co/H5kXdzYNAq

over 2 years ago

#AsmResolver 5.5.0 is out! This version brings rudimentary #ReadyToRun (R2R) parsing and writing, allowing you to locate and read native code of precompiled managed method bodies in a #dotnet binary. Full changelog, binaries and guides on GitHub: 👉https://t.co/tNt0NQZJ5L

0

55

17

18

26K

1

42

15

12

12K

over 2 years ago

#AsmResolver 5.5.0 is out! This version brings rudimentary #ReadyToRun (R2R) parsing and writing, allowing you to locate and read native code of precompiled managed method bodies in a #dotnet binary. Full changelog, binaries and guides on GitHub: 👉https://t.co/tNt0NQZJ5L

0

55

17

18

26K

over 2 years ago

How long does it take you to deobfuscate ConfuserEx2 (#ConfuserEx 1.6.0+-)?🤓 Finally got some time to make my ConfuserEx2 string decryptor more robust (switched to #AsmResolver and #Harmony) to handle customized versions...😊💪

4

183

40

67

24K

almost 3 years ago

Another day, another #AsmResolver version bump: 5.4.0 is out now. This release includes support for #PE certificate tables, PE forwarder exports, more quality of life improvements and more bug fixes. 👉 https://t.co/k9N4uZNC43 #reversing

1

23

5

6

3K

almost 3 years ago

I spent my Saturday on a dumb project answering the following question: What is the smallest #dotnet Hello World binary? Turns out, this rabbit hole is deeper than you may expect, so I wrote a blog post about it: 👉 https://t.co/NgwFs6eZOL #reversing #obfuscation #asmresolver

washi_dev's tweet photo. I spent my Saturday on a dumb project answering the following question:

What is the smallest #dotnet Hello World binary?

Turns out, this rabbit hole is deeper than you may expect, so I wrote a blog post about it:
👉 https://t.co/NgwFs6eZOL

#reversing #obfuscation #asmresolver https://t.co/uJYDxy2WFf

6

168

47

53

27K

about 3 years ago

#AsmResolver 5.3.0 is out! More performance and #pe reader bugfixes, new docs, and we also made it easier to ignore errors when writing #dotnet modules. Changelog and download links: 👉 https://t.co/7KG0Op0ANU #malware #reversing

0

20

3

2K

about 3 years ago

I am releasing a tool "sc2pe" that demonstrates the usage of the Native AOT dotnet format -> using the latest dotnet SDK 8+ : https://t.co/veStGop0Fx ➡️It is a simple #dotnet Native AOT app that uses #AsmResolver to convert shellcode to PE. ➡️32-bit and 64-bit shellcodes are supported -> resulting in 32-bit or 64-bit PEs. ➡️Releases are compiled for both linux-x64 and win-x64. ➡️Release binaries could be run without any dotnet dependency (just run and enjoy) I was playing/reversing with forms of Native AOT a lot (ReadyToRun, AOT), and I also wanted to bring something to the community, so here it is 🤓😊

3

103

47

26

22K

about 3 years ago

#AsmResolver 5.2.0 is out now. This version includes read support for many more #PDB symbols, #dotnet AppHost patching, .NET TypeSignature::IsAssignableTo(type), QoL improvements and bug fixes. 👉 Full changelog and download links: https://t.co/24C3YSSIyY #reversing #malware

2

8

3

2

1K

over 3 years ago

Big thanks to my Manager, TeamLeader and, of course, my colleague @jagaimokawaii for walking all over it and helping me to make it better. Big thanks to: @washi_dev for developing #AsmResolver and other excellent tools @elektrokilldev for his amazing work on #dnSpyEx 🙏🙌💙

1

7

0

649

over 3 years ago

It is a big honor for me that we @_CPResearch_ could share my latest research "#DotRunpeX - demystifying new virtualized .NET injector used in the wild"🤗 Deep dive into the #dotnet #reversing PoCs for analyzing virtualized .NET code #AsmResolver #ClrMD #PowerShell #MustGoDeeper

Check Point Research

@_CPResearch_

over 3 years ago

Defeating #dotRunpeX — New #virtualized .NET injector abusing advanced techniques to deliver numerous malware families. CP<r> provides an in-depth analysis of this threat introducing several PoC techniques for reversing protected/virtualized #dotnet code. https://t.co/PxzqoIJJKu

1

96

42

25

31K

11

77

25

9

14K

over 3 years ago

I thought it was time to show off some of #AsmResolver's new #native #PE #patching API. In this blog, we discuss how to programmatically inject code into an arbitrary PE, and learn how to construct new import directories as we go. Full post: https://t.co/GaIyQuUw5N #reversing

1

85

30

36

9K