Unpack .Net Reactor

Yesterday I made an article about unpacking .Net Reactor You can can find it in my portal at post How to unpack .Net Reactor. In this article I introduce new way to unpack .Net Reactor. It is not the same as the ways which are used around the world now. I think it’ll help the others to find the other methods to unpack .Net assembly.

During writing this article and export it to PDF I found that there is a problem with my PDF converter. I write my article in Word and use an open source program PDF Creator to convert it to PDF. In my article I use hyperlinks to the website of tools. Instead of showing direct hyperlinks I hide the hyperlinks under the description. And PDF Creator can not render it. They just ignore the hyperlinks and therefore after converting into PDF, I can not click on the description to open the hyperlinks anymore. I do not know if there is another open source PDF converter. I thing PDF Creator is the best one but he did not support indirect hyperlinks until now. That is a big disadvantages. I have such problem in another open source software, that is FileZilla. FileZilla is a popular open source FTP Client but it does not support to get link after uploading. That is a big advantage that man must do it manually by copying the path and paste the file name behind. Sometimes I see that some popular open source software is not good enough as I expect. They try to implement something which I do need and pass all basic functions.

And last thing of yesterday is that with help of my cousin I found one of my beloved flash which I forgot its name after a long time. You can see it here, it is very meaningful. The interview with god.

The first news of today is that my soap comes back. Someone who stole it, gave it back. The way that my soap came back is exactly same as the way it went. Just after a night, it is here. :)).


  1. Hi,
    Thanks for the great article. I\’m experiencing problems during practise. I\’ve saved the assembly from memory via OllyDRX, opened it via CFF Explorer. It said `number of existing metadata streams is 65535 …. ` so I clicked no, searched for BSJB, changed the RVA. When I tried to open it via Reflector, it said `04BD0001, Index and count must refer to a location within the buffer. Parameter name: bytes`. Any ideas? Thanks in advance 😉

  2. @motor: Sorry it’s long time since I did not play with unpacking .net anymore. So I can not help you but I think you can find helpful article at reteam.org.

Leave a comment

Your email address will not be published. Required fields are marked *