[LaTortue]

This code will removing the Portable Executable Header at runtime, this work only on console application (I do not know why )

Download:
https://gist.github.com/TortegaFR/1a9bcf...ee4247f3a3

[Killpot]

This isn't really secure man, just removing headers won't stop anyone with a few brain cells, they're very easy to reconstruct. You're also assuming x86 architecture, what about x64 or Any? That and you're not even restoring the old protection. If you want something done properly use this: http://www.unknowncheats.me/forum/vb-net...d-net.html

[Wildfire]

It's clever, but not impenetrable. I made a short video on this, only adding a pause so I can inject the DLL (obviously you would call the protector function after you loaded DLL from memory (not disk because that defeats the purpose), but I had to do it by hand and didn't have a memory injector on hand)

[Killpot]

It's clever, but not impenetrable. I made a short video on this, only adding a pause so I can inject the DLL (obviously you would call the protector function after you loaded DLL from memory (not disk because that defeats the purpose), but I had to do it by hand and didn't have a memory injector on hand)

Could have just started the program as suspended and dumped everything before the protection even started, hell you could even open the program in .Net Reflector and remove the check.

[Wildfire]

It's clever, but not impenetrable. I made a short video on this, only adding a pause so I can inject the DLL (obviously you would call the protector function after you loaded DLL from memory (not disk because that defeats the purpose), but I had to do it by hand and didn't have a memory injector on hand)

Could have just started the program as suspended and dumped everything before the protection even started, hell you could even open the program in .Net Reflector and remove the check.

Very true, but I was lazy and adding a pause in there was easier than calling a suspend function