Obfuscation is the process of scrambling and encrypting software so that it cannot be easily reverse-engineered. The goal is to stop all casual hackers and as many serious hackers as possible from trying inspect and crack the code.
As I described in my article "Obfuscation? Gesundheit!," programs written for .NET can be reverse-engineered quite easily. Anyone with a decompiler such as the free .NET Reflector can look at .NET applications and libraries and literally see the entire original source code, including names, logic and flow. Hackers can inspect .NET software to find and exploit its security flaws, steal unique ideas and license keys, or pirate the application. To plug this massive security hole, .NET software should be obfuscated.
Following is a list of .NET obfuscators available today and any online reviews. Price is for one developer license unless otherwise noted. A plus sign indicates the price is for the standard version, and advanced versions are available. Please comment if any obfuscators are missing, or if you would like to report any new reviews, updates, errors or broken links, as I will keep this list updated.
Obfuscator | Company | Price | Reviews |
Aspose.Obfuscator | Aspose | free, no support | HTSG |
Assemblur | Metapropeller | free | |
AssemblyLockbox | Gibwo | $49.95/month service | |
Babel | Alberto Ferrazzoli | free | |
BitHelmet Obfuscator | BitHelmet | $245 | |
C# Source Code Obfuscator | Semantic Designs | $200 | |
CliSecure | SecureTeam | call vendor | |
CodeArmor .NET | v.i. labs | call vendor | VIL |
CodeVeil | Xheo | $899 | |
CodeWall | CodeWall Technologies | $390 | |
Decompiler.NET | Jungle Creatures | $550 | HTSG |
DeepSea Obfuscator | TallApplications BV | $299 | |
Demeanor for .NET | Wise Owl | $799 | HTSG |
Deploy.NET | Jungle Creatures | $750 | HTSG |
DNGuard HVM | ZiYuXuan Studio | $899 | |
Dotfuscator Community | PreEmptive Solutions | free with Visual Studio | |
Dotfuscator Professional | PreEmptive Solutions | call vendor | HTSG, CRN, JOT |
dotNet Protector | pvlog | €300+ | HTSG |
Eazfuscator.NET | Oleksiy Gapotchenko | free | |
Goliath .NET Obfuscator | Cantelmo Software | free, donations | |
Google Obfuscar | free | ||
LSW IL-Obfuscator | Lesser-Software | $29 | |
NetOrbiter | WowPanda | free | |
.NET Reactor | Eziriz | $179 | DOL |
Obfuscator.NET | Macrobject | $199 | |
PC Guard for .NET | SofPro | €399 | |
Phoenix Protector | NTCore | free | |
Postbuild .NET Obfuscator | Xenocode | $1599 for 5 | |
QND-Obfuscator | Desaware | $39.95 | HTSG |
Salamander .NET Obfuscator | Remotesoft | $799 | HTSG, Egg, JOT |
Salamander .NET Protector | Remotesoft | $1,899 | HTSG |
SharpObfuscator | CodePlex | free | |
Skater .NET Obfuscator | Rustemsoft | $99+ | |
{smartassembly} | Cachupa | $399+ | DOL, Neo |
Spices.Net Obfuscator | 9rays.net | $399+ | HTSG, DOL |
Thinstall | vmware | $4,995+ |
Updated:
- 29-Apr-08: Added Assemblur, DeepSea Obfuscator.
- 15-Jul-08: Phoenix Protector now free. Added Google Obfuscar, SharpObfuscator, and some reviews.
- 25-Sep-08: Added Babel.
- 26-Apr-10: Added BitHelmet.
- 27-Apr-10: Added CodeWall.
- 13-Nov-10: Added NetOrbiter. Updated Spices.Net link and price.
[…] .NET Obfuscators (Timm Martin) […]
One more (mine), not so actively maintained but still updated from time to time:
http://www.metapropeller.com
“The goal is to stop all casual hackers and as many serious hackers as possible from trying inspect and crack the code.” and also to stop people from learning anything from you.
One more with Silverlight support: DeepSea Obfuscator.
See http://www.deepseaobfuscator.com
Updated, thank you.
There is a review for CodeArmor product. It was done by Information Security
http://www.vilabs.com/docs/InformationSecurity_CodeArmor_Review.pdf
1)http://www.codeplex.com/SharpObfuscator
And also:
2)http://code.google.com/p/obfuscar/
Obfuscation…
Hvorfor Obfuscation? Den koden du skriver for .NET ligger helt åpen for alle å se selv om den er i form av en dll eller exefil. Siden disse filene blir kompilert først i runtime av …….
Latest Phoenix Protector 1.4 is freeware now as well…
http://www.ntcore.com/phoenix.php
Updated. Thank you, everyone.
I have done an obfuscator that you can download at:
It is free and it works well. Give it a try:
Its name is Babel and can be downloaded at:
http://code.google.com/p/babelobfuscator/
Features:
Type, Methods, Events, Properties, Fields name obfuscation.
MSIL control flow obfuscation
String encryption
It is based on new Microsoft Phoenix Technology see:
http://connect.microsoft.com/Phoenix
bye
Please can you update the list of obfuscators adding Babel Obfuscator?
Name: Babel
Company: Alberto Ferrazzoli
Price: Free
Address:
http://code.google.com/p/babelobfuscator/
Updated, added Babel.
I have a .NET application that runs in conjunction with MS XP/Vista and Microsoft PowerPoint. I want to deploy the strongest code protection option available that will be fully compatible with Microsoft Office Applications to help avoid .NET support/compatibility issues, e.g. missing interop assemblies or .NET updates. Considering these and future compatibility issues which is a better solution:
– Code obfuscation for .NET – stick with .NET and make it more difficult to reverse engineer
– Code conversion from .NET to native code. Could we deploy to platforms without .NET Framework or support Office for Mac using this approach?
It comes down to how much you want to pay for your requirements.
Some obfuscators are real crap. At the very least, the obfuscator should crash .NET Reflector when you attempt to read the protected assembly. CodeWall is a good choice at $399.
But the best obfuscators will also foil in-memory attacks. CodeVeil and CliSecure are examples, but both cost over $1200/seat.
If you are concerned about clients having the proper version of .NET installed, then you may want to convert from .NET to native code. XenoCode PostBuild is an example at $1600/seat.
What a big list is this! Very informative post. Thank you.
Hi! Would you please add our new BitHelmet Obfuscator?
BitHelmet Obfuscator (http://www.bithelmet.com) is a new great product for .net application protection.
Thank you very much
Sorry, I forgot to add the price: U$S 245. Thx!
Phoenix protector really does a decent job!!!!!
hi, can you add Netorbiter to your list?
http://www.zolohouse.com/wow/NetOrbiter/index.html
I just finished it, supports .net 1,2,3, 64bit or 32 bit, cross dll obfuscates. WPF/Silverlight supported (some manu work involved).
Could you please change the link to the Spices.Net Obfuscator product page to this: http://www.9rays.net/Category/55-spicesnet-obfuscator.aspx ?
And start price of this product is $399.90 (console edition). That product is free for non-commercial use.
Thanks in advance
Just over a year ago we discovered that someone had created a keygen for our commercial software. 2 years of work could have gone up the spout, and the dangers of developing software on the .Net platform (e.g how easy assemblies are to reverse engineer) became very clear.
We looked around at all the different products that were on the market and they were all either far too expensive or really complicated. We just wanted something that we could point at our final compiled versions of our assemblies, hit ‘go’, and then distribute the protected article.
Skater .Net obfuscator fitted the bill perfectly, and was the best value for money solution that we found (and we looked at a lot of those on offer!).
So, I would like to thank RustemSoft for producing what is a great bit of software.
A change of licence keys a year ago, and an extra couple of minutes to scramble the final assemblies before we distribute a new version and the problem of key gens and such has completely gone away.
Babel is no longer free. The free version only runs for a few days. You must pay to add at least one feature to get past this – not terrible, but it’s no longer free.
Orange Heap obfuscator (http://orangeheap.blogspot.com) and CodeFort obfuscator (http://codefort.org) are not mentioned here. They both work very well and look very efficient. Orange Heap is absolutely free and CodeFort hsa different licences including free one.
Can you add Crypto Obfuscator to the list? It is a lot cheaper but still has all of the features found in others, as well as some unique ones like Anti-Debug, Anti-Tamper, etc.
Name : Crypto Obfuscator For .Net
Link : http://www.ssware.com/cryptoobfuscator/obfuscator-net.htm
Please update the list and add following obfuscator…
MAYCOMS FxProtect Express
Price: Free
http://www.maycoms.net/fxprotect-obfuscator
MAYCOMS FxProtect Professional
Price: $499
http://www.maycoms.net/fxprotect-obfuscator
Can you please add new link for the MAYCOMS FxProtect obfuscator.
http://www.maycoms.net/fxprotect-obfuscator
And starting price of this product is $499 (Professional Edition). Express edition of this product is free.
Thank you…
Thanks for this list!
Unfortunately, the SharpObfuscator is pretty much dead other than the time it wastes developers by being downloadable. It crashes as soon as one wants to obfuscate even a pure C# DLL from VS2005 (around the time when the code was last updated).
It should be removed from your list to save others the trouble.
Thanks again!
Crypto Obfuscator missing from list.
I have been using Crypto Obfuscator and am very pleased with the features and performance. I can obfuscate a large WPF project quickly with no problems.
To obfuscate the same project with Dotfuscator took hours of setup and debugging.
Aspose is discontinued
1. SmartAssembly costs much more than $399 now
2. SharpObfuscator and Obfuscar seem to be discontinued
3. new free obfuscator – http://aveloy.com/products/DotRefiner.aspx
SeeUnsharp .NET Obfuscator is missing in the list. It’s relatively new and under active development. Prices range from 99 to 499 € depending on the set of features. It’s available at http://seeunsharp.net/obfuscator .
(Disclaimer: I am the developer of this product.)
Hello, nice article please add KONIO Obfuscator on your list:
http://www.top4download.com/konio-obfuscator/hnuogtxm.html