blocks|key|1659369|text|这是真的!|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1659370|使用Reflector查看您自己的一个可执行文件。|offset|length|1659371|这是否意味着C#“在安全方面还不够好”？不，这不是那个意思。|1659372|C#的安全性没有任何问题。如果你不想让世界知道你发布的可执行文件，你只需要确保你不会把任何秘密放在里面。(这几乎适用于任何语言，不仅仅是C#。所有的可执行代码都可以进行反向工程，只是某些语言/框架比其他语言/框架更容易。)|1659373|entityMap|0|LINK|mutability|MUTABLE|url|http://www.red-gate.com/products/reflector/^0|0|2|9|0|0|0|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|S|8|@]|9|@$D|T|E|U|1|V]]|A|$]]|$1|F|3|G|5|6|7|W|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|X|8|@]|9|@]|A|$]]|$1|J|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]]|K|$L|$5|M|N|O|A|$P|Q]]]]

It's true!

Take a look at one of your own executables using <a href="http://www.red-gate.com/products/reflector/" rel="noreferrer">Reflector</a>.

Does this mean that C# is "not enough good from safety aspect"? No, it doesn't mean that.

There's nothing wrong with the safety of C#. You just need to ensure that you don't put any secrets in your published executables if you don't want the world to know about them. (This applies to pretty much any language, not just C#. All executable code can be reverse-engineered, it's just that some languages/frameworks make it easier than others.)

blocks|key|1661256|text|哦，亲爱的。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1661257|即使你用C或其他语言编写你的程序，你总是可以从可执行文件中提取机器代码(即使它是一些奇怪的自我修改的代码)，然后你总是可以得到汇编表示。这是必要的，因为CPU只能执行机器代码。这对于为任何图灵机编写的任何程序来说都是固有的。|1661258|这一事实在任何游戏或应用程序发布几天后就会出现裂缝，无论开发人员多么努力地试图混淆代码，都很好地说明了这一点。有一些混淆技术，但最终，总是有可能对机器代码(或.NET中的IL代码)进行逆向工程。市面上也有非常好的汇编->+C反编译器。|1661259|只要接受这样的事实，你的代码可以被逆向工程，如果有人需要足够的源代码并愿意在上面投入一些时间，你就会做到这一点。通过牢记这一点来设计你的软件。|1661260|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|J|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|K|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|L|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|M|8|@]|9|@]|A|$]]|$1|H|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|I|$]]

Oh dear.

Even if you write your program in C or whatever language, you can always extract the machine code from the executable (even if it's some weird self-modifying code) and then you can always get the assembly representation. This is necessary because CPUs can only execute machine code. This is inherently true for any program written for any Turing machine.

This fact is well illustrated by cracks popping up for any game or application a few days after their release no matter how hard the developers tried to obfuscate code. There are obfuscation techniques but in the end, it will be always possible to reverse engineer the machine code (or the IL code in the case of .NET). There are also very good Assembly -> C decompilers out there.

Just accept the fact that your code can be reverse engineered and will be if someone needs the source code enough and is willing to invest some time in it. Design your software by keeping this in mind.

blocks|key|1659476|text|显然，您可以使用来查看其源代码。但是你可以使用像这样的混淆器来使它变得有点困难。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1659477|但正如每个人都说的那样，你不能让它变得不可能逆向工程。|1659478|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

You can obviously use <a href="http://www.red-gate.com/products/reflector/" rel="nofollow noreferrer">Reflactor</a> to see its source code. But you can make it a bit difficult by using obfuscator like <a href="http://msdn.microsoft.com/en-us/library/ms227240(VS.80).aspx" rel="nofollow noreferrer">Dotfuscator</a> 

But as everyone is saying you cant make it impossible to reverse engineering it.

blocks|key|1593679|text|是的，C#可以进行反向工程。事实上，这很容易做到。看看Reflector。为了使它更难，但也不是不可能，请使用混淆程序。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1593680|请记住，使用C/C%2B%2B或任何其他语言编写的应用程序也可以进行逆向工程，尽管不像非混淆的C#或Java那么容易。|1593681|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

Yes, C# can be reverse engineer. In fact it is trivially easy to do. Take a look at Reflector. To make it harder, but not impossible use an obfuscator. 

Keep in mind that applications written in C/C++ or any other language for that matter can be reverse engineered as well albeit not as easily as non-obfuscated C# or Java.

blocks|key|359792|text|C#的每一个新版本都更难进行逆向工程。诚然，当C#在1.0版本时，Reflector实际上会暴露你的源代码，而现在我们在3.0版本，如果你使用匿名委托，链接，匿名类等，所有这些高级语法都被编译成“哑巴”MSIL，要将它们反向工程到原始源代码并不容易。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|359793|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

Each new version of C# is more difficult to reverse engineer. It's true that when C# was at 1.0, Reflector would practically reveal your source code however now we are at 3.0 and if you are using anonymous delegates, LINQ, anonymous classes etc. all that high-level syntax is being compiled down to "dumb" MSIL and it's no more easy to reverse engineer them back to its original source.

blocks|key|187711|text|使用.NET框架编写的任何代码都可以很容易地进行逆向工程。这就是模糊概念的用武之地。|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|187712|混淆是一些工具使用的一种技术，它会获取.NET+-based程序集输出，并尝试加密字符串、更改方法体的流控制、重命名变量、参数和方法名称，从而使随意的黑客更难跟踪和“反编译”代码。|187713|混淆并不能保证完全保护你的“专有”代码。要维护代码的最佳安全性，只需将代码保存在私有服务器上即可。重要的是要记住，只要有足够的时间和毅力，所有的代码都可以被潜在的“黑客”逆向工程。|187714|C#安全方面|187715|如果您觉得您有不希望其他用户看到和“解码”的“敏感”代码，那么您应该研究在原生Win32环境(C%2B%2B或Delphi)中开发这些代码部分，并继续享受.NET框架带来的好处。|187716|entityMap^0|W|2|0|0|0|0|6|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@$9|Q|A|R|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|S|8|@]|D|@]|E|$]]|$1|H|3|I|5|6|7|T|8|@]|D|@]|E|$]]|$1|J|3|K|5|6|7|U|8|@$9|V|A|W|B|C]]|D|@]|E|$]]|$1|L|3|M|5|6|7|X|8|@]|D|@]|E|$]]|$1|N|3|-4|5|6|7|Y|8|@]|D|@]|E|$]]]|O|$]]

Any code written using the .NET framework can easily be reverse engineered. That's where the concept of obfuscation comes in. 

Obfuscation is a technique some tools use that take a .NET -based assembly output and attempts to encrypt strings, change flow control of method bodies, rename variable, parameter and method names, thereby making it harder for causal hackers to follow and "decompile" the code.

Obfuscation does not guarantee complete protection of your "proprietary" code. To maintain the best security of your code, simply keep the code on your private servers. It's important to remember that all code can be reverse engineered given enough time and perseverance by the would-be "hacker".

C# safety aspect 
If you feel you have "sensitive" code you don't want other users to see and "decode", you should investigate developing those portions of code in a native Win32 environment (C++ or Delphi) and continue with the benefits afforded from the .NET framework.

blocks|key|187525|text|谷歌搜索“红门反射器”--+http://www.red-gate.com/products/reflector/|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|187526|如果你想防止这种情况，那么你需要一个模糊处理器，或者一些其他更高级的保护形式。|187527|entityMap|0|LINK|mutability|MUTABLE|url|http://www.red-gate.com/products/reflector/^0|E|17|0|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@$A|O|B|P|1|Q]]|C|$]]|$1|D|3|E|5|6|7|R|8|@]|9|@]|C|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|C|$]]]|G|$H|$5|I|J|K|C|$L|M]]]]

Google for "Red Gate Reflector" - <a href="http://www.red-gate.com/products/reflector/" rel="nofollow noreferrer">http://www.red-gate.com/products/reflector/</a>

If you want to prevent this then you need an obfuscator, or some other more advanced form of protection.

blocks|key|187734|text|将Reflector与文件反汇编插件http://www.denisbauer.com/NETTools/FileDisassembler一起使用-它将为您生成dll中的所有代码。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|187735|entityMap|0|LINK|mutability|MUTABLE|url|http://www.denisbauer.com/NETTools/FileDisassembler^0|I|1F|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

Use Reflector with the File Disassembler plugin <a href="http://www.denisbauer.com/NETTools/FileDisassembler" rel="nofollow noreferrer">http://www.denisbauer.com/NETTools/FileDisassembler</a> - it will generate all the code from the dll for you.

Is that right that C# can be reverse engineered? How is easy to do that? 
Can we say the C# is not enough good from safety aspect? And what about C++ compared with C# against decompiling?

C# - Executables decompilable (can be reverse engineered)?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

是不是说C#可以进行逆向工程？如何轻松做到这一点呢？我们可以说C#在安全性方面还不够好吗？与C#相比，与反编译相比，C++又如何呢？

问可反编译的C#可执行文件(可以进行逆向工程)？
EN

回答 8

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问可反编译的C#可执行文件(可以进行逆向工程)？EN

回答 8

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问可反编译的C#可执行文件(可以进行逆向工程)？
EN