finding ID/PW from binary (.NET)

When the binary was compiled based on .NET framework, the dnSpy is the shortcut to decompile it.

Unfortunately, IDA and Ghidra do not support .NET compiler, so there is no alternative. When we take a look into condition, we might find proper variable names then debug in real time to check the string value.

Leave a Reply

Your email address will not be published. Required fields are marked *