4

I'm Using .Net Reflector with Reflexil to edit or view .net Assembly codes.

I see this picture in reflexil.net:

reflexil.net

It Shows the "Compile" window. How can I see this window and edit codes?

Improve this question
1
  • 3
    Try dnSpy, it has far superior decompilation and it properly supports this feature and many others (debugging) without plugins.
    – mrexodia
    Dec 24 '16 at 14:48
3

Decompile a function with .NET Reflector, and in the Instructions tab of the Reflexil window, right click on an instruction and choose Replace all with code...:

https://www.youtube.com/watch?v=XaWtoCmOGpw#t=1m40s

Improve this answer
1
  • Thanks @jason-geffner. Now I can open Compile Window. But I can't find the codes of decompiled program and all events are empty!
    – 56356356356
    Jun 22 '16 at 15:24
3

This blog that I wrote a a few years ago describes all the steps to modify a .net binary with Reflector and Reflexil. Not sure which steps you're missing but I recommended to read&compare.

However, Today I would recommend Telerik's JustDecompile though as it has built in de-obfuscation (de4dot) and has an option to replace a section with code which is much, much, easier than writing replacement code in IL.

/EDIT: Here's a blog I wrote about using JustDecompile and Reflector to modify a .net binary.

Improve this answer
3
  • Your blog link is dead.
    – L29Ah
    Oct 31 '18 at 10:07
  • @L29Ah I checked both links and they seem to be fine, maybe temporary issue or maintenance when you checked?
    – Remko
    Nov 9 '18 at 13:31
  • Nope, check out this traceroute: bpaste.net/show/8f65550128e1
    – L29Ah
    Nov 12 '18 at 15:47
-1

There is a nice tool to play with .NET assemblies (https://www.digitalbodyguard.com/graywolf.html)

GrayWolf – Is a reverse engineering tool (focused on .NET Framework Applications)

Currently - is in a late beta stage It is similar to IL-Spy but this has a focue on edit/attack. GrayWolf was a tool I created to carry out research. The focus is on editing applications to make change quickly.

What can it do: DE-ObfuScatE,Edit IL(Live), Add payloads, Edit attributes(public/privet), Copy strong names signing on EXE/DLL

Improve this answer
4
  • is this program free?
    – 56356356356
    Sep 28 '16 at 13:42
  • @Ayrese yes it is
    – Soufiane Tahiri
    Sep 30 '16 at 9:37
  • 4
    While GrayWolf was a great tool in its day, I think that there are more modern and better tools for .NET reversing, such as dnSpy. dnSpy offers a nicer UI and a more robust engine (de4dot's) for handling heavily obfuscated binaries, while being able to do everything (as far as I am aware) GrayWolf can - including but not limited to IL editing.
    – Martin
    Nov 21 '16 at 21:26
  • This does not answer the question which was specifically about Reflexil
    – Igor Skochinsky ♦
    Dec 21 '16 at 11:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.