4

I'm Using .Net Reflector with Reflexil to edit or view .net Assembly codes.

I see this picture in reflexil.net:

reflexil.net

It Shows the "Compile" window. How can I see this window and edit codes?

|improve this question
  • 3
    Try dnSpy, it has far superior decompilation and it properly supports this feature and many others (debugging) without plugins. – mrexodia Dec 24 '16 at 14:48
3

Decompile a function with .NET Reflector, and in the Instructions tab of the Reflexil window, right click on an instruction and choose Replace all with code...:

https://www.youtube.com/watch?v=XaWtoCmOGpw#t=1m40s

|improve this answer
  • Thanks @jason-geffner. Now I can open Compile Window. But I can't find the codes of decompiled program and all events are empty! – 56356356356 Jun 22 '16 at 15:24
3

This blog that I wrote a a few years ago describes all the steps to modify a .net binary with Reflector and Reflexil. Not sure which steps you're missing but I recommended to read&compare.

However, Today I would recommend Telerik's JustDecompile though as it has built in de-obfuscation (de4dot) and has an option to replace a section with code which is much, much, easier than writing replacement code in IL.

/EDIT: Here's a blog I wrote about using JustDecompile and Reflector to modify a .net binary.

|improve this answer
  • Your blog link is dead. – L29Ah Oct 31 '18 at 10:07
  • @L29Ah I checked both links and they seem to be fine, maybe temporary issue or maintenance when you checked? – Remko Nov 9 '18 at 13:31
  • Nope, check out this traceroute: bpaste.net/show/8f65550128e1 – L29Ah Nov 12 '18 at 15:47
-1

There is a nice tool to play with .NET assemblies (https://www.digitalbodyguard.com/graywolf.html)

GrayWolf – Is a reverse engineering tool (focused on .NET Framework Applications)

Currently - is in a late beta stage It is similar to IL-Spy but this has a focue on edit/attack. GrayWolf was a tool I created to carry out research. The focus is on editing applications to make change quickly.

What can it do: DE-ObfuScatE,Edit IL(Live), Add payloads, Edit attributes(public/privet), Copy strong names signing on EXE/DLL

|improve this answer
  • is this program free? – 56356356356 Sep 28 '16 at 13:42
  • @Ayrese yes it is – Soufiane Tahiri Sep 30 '16 at 9:37
  • 4
    While GrayWolf was a great tool in its day, I think that there are more modern and better tools for .NET reversing, such as dnSpy. dnSpy offers a nicer UI and a more robust engine (de4dot's) for handling heavily obfuscated binaries, while being able to do everything (as far as I am aware) GrayWolf can - including but not limited to IL editing. – Martin Nov 21 '16 at 21:26
  • This does not answer the question which was specifically about Reflexil – Igor Skochinsky♦ Dec 21 '16 at 11:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.