C
C#2y ago
xenon

❔ ✅ VM PROTECT VS AGILE.NET...

Every .net application is easily unpacked..the main thing is virtualisation... which is best virtualisation in both of these-- vm protect and agile.net which is hard ti devirtualise.... Kindly please if anyone best of these and also hard to devirtualise.............. Regards....
75 Replies
Jimmacle
Jimmacle2y ago
$obfuscation
MODiX
MODiX2y ago
"Then finally, there is that question of code privacy. This is a lost cause. There is no transformation that will keep a determined hacker from understanding your program. This turns out to be true for all programs in all languages, it is just more obviously true with JavaScript because it is delivered in source form. The privacy benefit provided by obfuscation is an illusion. If you don’t want people to see your programs, unplug your server." - Douglas Crockford https://softwareengineering.stackexchange.com/a/155133 * Spend your effort on putting proprietary things in your api, and keeping the distributed code as empty as possible * Use AuthN/AuthZ to control who/what/when/etc... * Free obfuscation is worth the amount your paid for it -- it's already broken and most decompilers out there can make sense of it. * Paid ofbuscation will bankrupt you unless you have a very strong revenue stream and can justify the additional cost with gained sales * The "threat" of someone hijacking your UI and shimming it to make it provide them money is not a real threat. If this is legitimate software, you can ruin their business with lawsuits - Cisien
Software Engineering Stack Exchange
Is it important to obfuscate C++ application code?
In the Java world, sometimes it seems to be a problem, but what about C++? Are there different solutions? I was thinking about the fact that someone can replace the C++ library of a specific OS wit...
xenon
xenonOP2y ago
can anyone here tell which is best in virtualisatiojn... : virtualisation... in between agile.net and vm protect i want to know which .net virtualisation is stronges and unablue to devirtualise
Buddy
Buddy2y ago
Why?
Jimmacle
Jimmacle2y ago
there is no obfuscation that is unable to be reversed
xenon
xenonOP2y ago
protect my c# application
Buddy
Buddy2y ago
What's there to protect?
Jimmacle
Jimmacle2y ago
generally if you don't want someone to have something, don't give it to them (put the valuable code/features on a server and interact with it using an API)
xenon
xenonOP2y ago
firebase private key... i want to protect my firebase private key,.....which is on activator dll ,activator dll is easy comeout when anyone use extreme dumper ..so iam afraid..
Buddy
Buddy2y ago
What is an activator?
Jimmacle
Jimmacle2y ago
yes, you generally do not put your personal private keys in an application that you give to your customer
xenon
xenonOP2y ago
in activator there is activation pattern of software and firebase connection. and in firebase connection there is firebase private key and database correct
reflectronic
reflectronic2y ago
i am sorry but you cannot hide credentials in your app by using obfuscation
xenon
xenonOP2y ago
in firebase can i limit software functionality.....
reflectronic
reflectronic2y ago
if your app can access it, then so can the app's user obfuscation can make it take longer for your app to be cracked, but it can't guarantee that nobody will get your credentials. it is fundamentally impossible
xenon
xenonOP2y ago
in Firebase can i limit functionality xcan in my case virtualisation work...
Tvde1
Tvde12y ago
What is virtualization
Jimmacle
Jimmacle2y ago
the wrong word for obfuscation it sounds like your application should have its own API that users authenticate with individually
reflectronic
reflectronic2y ago
no, because, again, if your application has access to the key, so does your application's user
Buddy
Buddy2y ago
This is like connecting to a database live from the software rather than using an API.
xenon
xenonOP2y ago
my software has keygen -- and key connect to firebase to block unblock the software
Jimmacle
Jimmacle2y ago
sounds like it doesn't solve your problem if you still need your firebase key in your app
Tvde1
Tvde12y ago
What?
Jimmacle
Jimmacle2y ago
guess what kind of software i have to maintain when
xenon
xenonOP2y ago
no i dont want firebase key on my app....what to do what is best way to protect it....
Jimmacle
Jimmacle2y ago
you can't protect it
Buddy
Buddy2y ago
There is no protecting your app in .NET
Jimmacle
Jimmacle2y ago
so the solution is don't put it in there at all
Buddy
Buddy2y ago
Good luck to you.
Tvde1
Tvde12y ago
Don't put the firebase key in your app. It's the only way Make a API that talks to your app API talks to firebase
xenon
xenonOP2y ago
how much it hardly takes
Tvde1
Tvde12y ago
? How much work does it take to create an API? That depends on your level of expertise
xenon
xenonOP2y ago
ok Can functional code i put on firebase.....?
Tvde1
Tvde12y ago
I'm not sure what you're asking
xenon
xenonOP2y ago
one last thing anyone have idea of skater.net obffuscation it protect code and private key on server...... what is ur views...
Jimmacle
Jimmacle2y ago
no obfuscation is foolproof as you've seen, the general opinion is that it's not worth doing
xenon
xenonOP2y ago
yes that one i know...but in skater there is function like protect firebase key and string on its server....
Buddy
Buddy2y ago
As I have and many more have said. There is no way to truly protect it. The only way to protect is if you lock it behind an API Fairly sure you've asked this before too. Same answer.
xenon
xenonOP2y ago
is memory dump not comeout private key....
Buddy
Buddy2y ago
Anything that exists in the program, it has to be read somehow Someone can access the RAM when it is in use and read the key. As said, useless.
jcotton42
jcotton422y ago
Or it could be read from the network requests
Jimmacle
Jimmacle2y ago
yeah, there's no rule against MITMing your own computer
xenon
xenonOP2y ago
not understand...
Jimmacle
Jimmacle2y ago
your users could look at the network requests going to firebase and extract the key from there without even touching your C# code
xenon
xenonOP2y ago
how it can be done and which tool
Jimmacle
Jimmacle2y ago
fiddler? that's one i've used before, i'm sure there are more
Buddy
Buddy2y ago
There's no specific "tool" It's just called Mitm.
xenon
xenonOP2y ago
please tell any tool ..
Jimmacle
Jimmacle2y ago
the tool doesn't matter because knowing which tool won't let you stop it
xenon
xenonOP2y ago
if my key is exposed --- than all user and activation in hand of cracker...
Jimmacle
Jimmacle2y ago
which is why you don't include your key in your app
xenon
xenonOP2y ago
or simple particular application on that system crack..
jcotton42
jcotton422y ago
Fiddler, Wireshark, etc.
xenon
xenonOP2y ago
or keygen is created
Jimmacle
Jimmacle2y ago
you're ignoring the solution that has been given to you repeatedly don't put the key in your app
Buddy
Buddy2y ago
You've been given that exact response before, I'm surprised that you didn't take the advice of multiple people.
xenon
xenonOP2y ago
I am not ignoring dear ..i understand fully ur concepts
Jimmacle
Jimmacle2y ago
so why are we still talking about obfuscation when
Unknown User
Unknown User2y ago
Message Not Public
Sign In & Join Server To View
xenon
xenonOP2y ago
best suggestion --- in ur view i have to disconnect with firebase and connect to server....
Unknown User
Unknown User2y ago
Message Not Public
Sign In & Join Server To View
xenon
xenonOP2y ago
above one hinted but not tell disconnect the firebase....
Unknown User
Unknown User2y ago
Message Not Public
Sign In & Join Server To View
xenon
xenonOP2y ago
last and final which server is best for .net ..
Unknown User
Unknown User2y ago
Message Not Public
Sign In & Join Server To View
xenon
xenonOP2y ago
can linux server also works....
Unknown User
Unknown User2y ago
Message Not Public
Sign In & Join Server To View
MODiX
MODiX2y ago
the_diddy#0000
Yup, which is why you have an intermediate api and give each user their own key which only exposes stuff relevent to them.
Quoted by
<@!689473681302224947> from #VM PROTECT VS AGILE.NET... (click here)
React with ❌ to remove this embed.
Unknown User
Unknown User2y ago
Message Not Public
Sign In & Join Server To View
MODiX
MODiX2y ago
jimmacle#0000
generally if you don't want someone to have something, don't give it to them (put the valuable code/features on a server and interact with it using an API)
Quoted by
<@!689473681302224947> from #VM PROTECT VS AGILE.NET... (click here)
React with ❌ to remove this embed.
MODiX
MODiX2y ago
jimmacle#0000
it sounds like your application should have its own API that users authenticate with individually
Quoted by
<@!689473681302224947> from #VM PROTECT VS AGILE.NET... (click here)
React with ❌ to remove this embed.
Unknown User
Unknown User2y ago
Message Not Public
Sign In & Join Server To View
xenon
xenonOP2y ago
Thanks all group members to cooperate and giving best solution.....
Unknown User
Unknown User2y ago
Message Not Public
Sign In & Join Server To View
Accord
Accord15mo ago
Was this issue resolved? If so, run /close - otherwise I will mark this as stale and this post will be archived until there is new activity.
Want results from more Discord servers?
Add your server