Https://github.com/0xd4d/dnSpy
Dnspy is a tool for reverse engineering. NET Assemblies. It includes an anti-compiler, a debugger, and an assembly editor (and more) that you can easily extend by writing your own extensions. It uses dnlib to read and write to the assembly, so it can handle confusing assemblies (such as malware) without crashing.
Binary
Latest release
Latest Version:
or build from source code, see Wiki.
features
- Open Source (GPLv3) and Free Forever (: TM:)
- Assembly editor
- Edit any method with C # or Visual Basic, properties and Events
- Code Editor has IntelliSense (code completion , signature help, Quick Info)
- You can add the entire class to an assembly by adding C # and Visual Basic code
- Edit types (classes), methods, properties, All metadata for events and fields
- Add, delete, rename any type (Class), method, property, event, field
- Edit, add, delete. NET resource and saving it to disk the
- Il Editor allows you to edit the method body at IL level: il directive, native, exception handler
- Debugger
- Debug any. NET assembly, no source code required
- Set breakpoints in any assembly, including framework assemblies, assemblies in the GAC, and assemblies that exist only in memory
- Memory window
- Output Window
- Attaching to a process
- The window of the natives
- Native content (such as decrypted byte arrays) can be saved to disk
- Call Stack Window
- Threads window
- Module window
- Modules (for example, decrypted memory modules) can be saved to disk
- Exception settings
- Dynamic assemblies can be debugged
- Support for debugging CORECLR assemblies
- Decode to C#,visual Basic,il
- Theme: Blue, dark, light (and high Contrast)
- Support for smaller screens (e.g. laptop computers)
- Line height can be optimized for smaller screens
- Blank and non-alphanumeric lines are 75% of normal height
- No extra spacing between rows (1 vertical pixels per row)
- The menu and toolbar share the same row
- Full Screen mode (Shift + Alt + Enter) to save some vertical pixels
- High DPI support and per-monitor DPI awareness
- Translate into several languages
- Highly scalable
- Write your own extension and add your own features
- All major functions are already extended (assembly editor, debugger, anti-compiler)
- Multiple Tabs and tab groups
- your screen is too big? don't cut it in half, add another vertical label group, read two classes at a time!
- The tabs and locations in the text editor are saved when you close Dnspy and resume on startup so that you can continue to stop
- Search for assemblies
- Search types (classes), methods, properties, events, and fields
- Search for strings or numbers in your code
- Assembly ANALYZERS
- Find the use of types (classes), methods, properties, events, and fields
- BAML to XAML anti-compiler
- Fast
- Highlighted references, keywords
- Highlight references under the caret to make it easier to see all the uses of the reference in your code
- tags, shift + Tab,ctrl + SHIFT + up, Ctrl + SHIFT + Move down to the next or previous reference
- ALT + down and ALT + up move to Next or previous definition (type (Class), method, property, event, field)
- Visualization of structures
- Vertical guide line displayed between the beginning and end of a block of code
- different colors are used for different blocks, for example. cycle, condition, method, etc
- Dnlib is used to read and write assemblies, so you can handle confusing code (such as malware) without crashing
- Go to command:
- Entry point
- Assembly static Initialization method (<Module>: Cctor
- Any meta-data tokens
- Any meta-data rows
- Syntax highlighting tooltips with XML document annotations when hovering over a type (Class), method, property, event, Field
- Methods, properties, and events are deserialized in source code order or in custom user-defined order
- The source code order means that the related methods are usually adjacent to each other, just as the programmer wants.
- Background images can be displayed in a text editor
- Export to Project decompile all selected assemblies and create a Visual Studio solution
- Multiple assemblies can be exported at the same time
- Create a Visual Studio solution (support Vs2005-vs-latest) and project files
- Supports WinForms and WPF classes (creating code-behind. cs/. vb files and WinForms. Resx/wpf. xaml files)
- Convert. NET resources to. resx files
- Open from GAC
- Command-line anti-compiler
- Support for Windows,linux and Mac
- Syntax highlighting output to screen
- Scripting with C#REPL
- Calling public Dnspy methods from scripts
- Script Debugger and other extensions
- Hex Editor
- Method tokens and addresses are displayed in comments and can be clicked to go to raw metadata or il bytes
- Meta Data Editor
- Collapse Assembly Explorer node command to quickly collapse unused nodes
- And more ...
Picture Time! Edit any method, property, or event in C # or Visual Basic
Edit any type (Class), method, property, event, Field
Add, delete, rename any type (Class), method, property, event, Field
edit, add, delete. NET resource and save it to disk
Il Editor allows editing method body at IL level: il directive, native, exception handler
Debug Any. NET assembly, no source code required
native content (such as decrypted byte arrays) can be saved to disk
optimized for smaller screens
Multiple tabs and tab groups
Search for Assemblies
Assembly Analyzers
highlight the reference, keyword, use Tab,shift + Tab,ctrl + SHIFT + up, Ctrl + SHIFT + Down select Next or previous reference or ALT + Up/down to make the next definition
The Structure visualizer adds a shaded vertical guide line between curly braces; loops, Try/catch and conditional blocks are displayed in different colors
The structure visualizer is useful when you use such a method:
go to: Entry point, Module initialization program, MD token, MD table row
syntax highlighting tooltips with XML document annotations when hovering over a type (Class), method, property, event, Field
background images can be displayed in a text editor
same image with left margin and top margin set to 75%
Export to Project decompile all selected assemblies and create a Visual Studio solution
command-line anti-compiler, support Windows,linux,mac
Use
C# REPL scripting , you can use the debugger and other extensions to control
C#Hex Editor
Meta Data Editor, click the token or press CTRL + Shift + D
want to contribute?
Check for open issues with problems, especially for grabbing tags , because they should be easier to start with.
If you send a PR, try using the same encoding style as the current item you are editing. This is a short list:
- Standard C # Coding conventions are in addition to:
- Label, size = 4
- Open curly braces ({) Always with
if / while /method-signature on the same line
- Use
var Most of the time, in addition to the basic type, you can use the original type (such as int ), and notvar
- just use ' this '. If you need
translation Dnspy
if you want to help translate dnspy into your native language, Please click here .
Wiki
for build instructions and other documentation, see Wiki.
License
Dnspy is based on licensed by GPLv3 .
. NET Dnspy Assembly editor, anti-compiler and debugger
