ExtremeDumper #
Injects a core DLL into the target process to read metadata directly from CLR internal objects. Bypasses anti-dump protections that deliberately corrupt PE headers once loaded.
Managed code reversing. Decompilers and deobfuscators for C# and .NET, from de4dot to specialized unpackers.
Injects a core DLL into the target process to read metadata directly from CLR internal objects. Bypasses anti-dump protections that deliberately corrupt PE headers once loaded.
The king of .NET reversing. When the original dnSpy went dark, the community stepped up with this fork. It is a decompiler and debugger in one—perfect for patching license checks in loaders or seeing how a Unity game calculates weapon damage.
Pro Tip: If you open a file and every function is named 'a()', 'b()', or 'c()', the dev used an obfuscator. You will need to run it through de4dotEx before dnSpyEx can make sense of it.
Command-line frontend for ILSpy that is handy for batch decompiles and scripted analysis. Useful when we want repeatable output across many assemblies.
A .NET decompiler with IDE-like navigation. Heavier than ILSpy, but useful for browsing and for its process view of loaded assemblies.
The 2026 standard for cleaning up .NET spaghetti. Most devs use a protector to turn their code into garbage so you can't see their license checks; this is the tool that turns it back into something you can actually read in dnSpyEx.
Pro Tip: If the standard de4dot fails on string decryption or crashes, this 'Ex' fork is usually the fix for modern protections like Reactor or Agile.
The 'de-spookifier' for KoiVM. When you open a C# assembly and it looks empty because the code is hidden inside a custom virtual machine, you use this to pull the logic back out into the light.
Pro Tip: Essential for reversing 'virtualized' plugins or loaders that look like empty shells in a normal decompiler.
Specialized deobfuscator for .NET Reactor 6.x. Handles token decryption and control flow cleaning that universal tools struggle with.
The go-tool for Agile.NET (CliSecure) protection. It strips the encryption layers and restores the original MSIL so you can read the code in dnSpyEx.
Essential for Babel.NET protected assemblies. It handles the MSIL encryption and renames obfuscated symbols back to something readable.