Skip to content

jomtek/Phoenix-String-Decryptor

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Phoenix String Decryptor

NTCore's Phoenix Protector offers a "string encryption" feature, which, as its name tells us, protects the strings present in your program.

Even after searching on the internet for ten minutes, I couldn't find a Phoenix string decryptor;
that's why I made one.

Static or dynamic ? Which one should I pick ?

enter image description here

If you believe the software you're analyzing may contain malware code, then you should pick static analysis, because dynamic analysis will load the assembly on your machine, causing possible damage.

How do I find a "method token" ?

Once you'll start this decryptor, it will ask you for a "method token": it's basically just the token of the decryption method. But how do you find it ? Here's a step-by-step guide :

1 - Open your file into DnSpy and find an encrypted string

enter image description here

2 - Find the encryption method

Click on the surrounded method

enter image description here

This will redirect you to the encryption-method definition

enter image description here

3 - There you go !

enter image description here

About

A simple tool which decrypts strings protected with Phoenix Protector

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages