OWASP

1
DecompilationInjection Maty SIMAN Maty (at)
checkmarx.com CTO, Checkmarx

• OWASP

December 2009
2
.NET Framework / IL
3
.NET Reflector
4
How to prevent?

• Encryption
• Managed
• Native
• Obfuscation

5
Obfuscation

• Demo

6
ECMA
7
Easiest
8
2nd
9
Now we can do everything
10
(No Transcript)
11
Open Questions

• Java
• ILDASM
• ?
• http//checkmarx.com/Resources/DecompilationInject
  ion.exe
• http//www.checkmarx.com/NewsDetails.aspx?id18ca
  t3
• Thank you !