This article is a mirror article of machine translation, please click here to jump to the original article.

Architect_Programmer_Code Agriculture Network»Architect › Programming › .Net/C # › .NET anti-debugging to enhance program security
View: 64401|Reply: 4

[Source] .NET anti-debugging to enhance program security

[Copy link]
Posted on 5/26/2020 3:10:54 PM | | | |
There are many decompiling tools under .net: dnspy, Reflector, ILSpy, etc

You can directly debug the compiled .exe program, view the values in memory, and even modify the source code directly.

So how does our program detect that it is being debugged or decompiled?

When starting the application normally, the user usually double-clicks the application to start, and its parent process is "explorer", we only need to check whether the parent process started is correct.

The different values obtained by double-clicking to run, cmd start, and dotnet start are as shown in the figure below:



If the parent process name is not explorer, the program exits.

.NET Core needs to install the following package, the command is as follows:


The code is as follows:







Previous:Uninstall Symantec Endpoint Protection (SEP) using commands
Next:Angular 9 implements the duplication (clipboard) feature

Related Posts
 Landlord| Posted on 11/10/2020 3:57:52 PM |
AppDomain.CurrentDomain.BaseDirectory and System.Environment.CurrentDirectory are inconsistent as well

Be wary of System.Environment.CurrentDirectory to get the current directory
https://www.itsvse.com/thread-9464-1-1.html


Posted on 9/26/2021 5:40:44 PM |
Posted on 9/29/2021 7:06:54 PM |
Come and see, thanks for sharing
Posted on 9/30/2021 2:42:10 PM |
Bullfrog to learn to learn
Disclaimer:
All software, programming materials or articles published by Code Farmer Network are only for learning and research purposes; The above content shall not be used for commercial or illegal purposes, otherwise, users shall bear all consequences. The information on this site comes from the Internet, and copyright disputes have nothing to do with this site. You must completely delete the above content from your computer within 24 hours of downloading. If you like the program, please support genuine software, purchase registration, and get better genuine services. If there is any infringement, please contact us by email.
Mail To:help@itsvse.com