dotnet-reverse
ZHUncover hidden logic inside your .NET binaries.
What it does
Guides analysis, deobfuscation, and optional patching of .NET binaries, producing saved findings and modified samples.
When to use it
Use for managed .NET/C# binaries, obfuscated assemblies, Sharp* tools, malware configuration analysis, and C# binary patches; route purely native binaries elsewhere.
How to use it
Give it a .NET binary to analyze or patch; it saves cleaned samples, analysis notes, and patch evidence as applicable.
What you provide
- Your files
Good to know
- cannot be undone: target.exe
What you need · 3
The preferred Windows workflow requires dnSpyEx for decompilation, debugging, and IL patching; the files provide a separate Linux/macOS CLI path.
Requires de4dot for the instructed initial deobfuscation of suspected obfuscated samples.
Enables direct agent-driven decompilation and IL inspection when installed and registered; the user must manually install the extension and register it.
Access · 1
This skill
target.exe
Starts the sample under debugging
Overwrites the original binary (irreversible)