Common. net cracking tools and. net cracking tools

Source: Internet
Author: User
Tags reflector

Common. net cracking tools and. net cracking tools

In. net cracking, we often mention the Reflector \ SimpleAssemblyExplorer and CFF release e tools. Let's take a simple and definite Windows Form program as an example to illustrate how they are used. The Code is as follows:

?
123456789101112131415161718192021222324252627 public partial class Conversion : Form    {        public Conversion()        {            InitializeComponent();        }        bool isTrialExpired = true;        private void button1_Click(object sender, EventArgs e)        {            double c = Convert.ToDouble(textBox1.Text);            double f = (c * 9 / 5) + 32;            label3.Text = f.ToString();        }        private void TrialExpiredCheck()        {            if (isTrialExpired)            {                MessageBox.Show(@"Trial Duration has expired! Installed Freh copy", "!!!!Alert Message!!!!");                Application.Exit();            }        }        private void Conversion_Load(object sender, EventArgs e)        {            TrialExpiredCheck();        }            }


The message box pops up and the program exits.

There are several methods to crack this program: 1. Set isTrialExpired to false; 2. Clear the Conversion_Load method; 3. Clear the TrialExpiredCheck method. We can implement the above three tools here:

Reflector:

Reflector must have a Reflexil plug-in. Open the program with Reflector and find the Conversion_Load method. Select Reflexil in tool:

Now we need to add an isTrialExpired = false; code in the Conversion_Load method. The operation is as follows:

Modify Conversion_Load as follows:

Click "OK" and Save:

Running result:

SimpleAssemblyExplorer:

Open the program and select class Editor:

Bool isTrialExpired = true; this code is actually two sentences: bool isTrialExpired = false; isTrialExpired = true; the second sentence is executed in the constructor method, which also corresponds to the first three commands marked here, we only need to delete the three commands.

Running result:

CFF certificate E:

Use ILDASM to open a program

Find the TrialExpiredCheck method. Here we will perform two attacks: 1. Delete Application. Exit (); 2. Delete all content in the method:

Open the program with CFF Explore

Enter 20cc at RAV:

Note:

IL_0018:/* 28 "(0A) 1_1a */call void [System. windows. forms] System. windows. forms. application: Exit (). The address is 28 1A 00 00 0A.

Change all 28 1A 00 00 0A to 00, and click Modify.

Save:

Running result:

To delete all the content of the TrialExpiredCheck method, delete the following command:

You need to change all the marked parts to 00:

Save and run the result:

You are welcome to make a picture of what is wrong with the download!

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.