Delta1Labs.Nebula.Tool
1.1.6
dotnet tool install --global Delta1Labs.Nebula.Tool --version 1.1.6
dotnet new tool-manifest
dotnet tool install --local Delta1Labs.Nebula.Tool --version 1.1.6
#tool dotnet:?package=Delta1Labs.Nebula.Tool&version=1.1.6
nuke :add-package Delta1Labs.Nebula.Tool --version 1.1.6
Nebula.NET — CLI (nebula)
Nebula.NET is an IL-level obfuscator and hardening tool for .NET assemblies, by
Delta-1 Labs. It rewrites compiled .dll/.exe files to make
reverse engineering harder while keeping the output behaviorally identical to the input.
This package installs the cross-platform command-line tool nebula as a
.NET global/local tool. It runs
on Windows, Linux, and macOS (.NET 8+), so it fits CI/CD pipelines and containers as well
as the desktop.
Obfuscation raises the cost of reverse engineering; it is deterrence, not an unbreakable guarantee. Nebula.NET's design priority is that protected assemblies keep behaving exactly like the originals.
Install
dotnet tool install --global Delta1Labs.Nebula.Tool
(The package ID is Delta1Labs.Nebula.Tool; the installed command is nebula.)
Then:
nebula --version
nebula protect MyApp.dll --config nebula.json
What it does
- Renaming of namespaces, types and members, with public-API preservation and reflection/serialization auto-detection.
- Control-flow obfuscation, string/constant encryption, resource encryption, and whole-method encryption (anti-dump).
- Reference (proxy-call) obfuscation to hide the call graph, built to resist automated deobfuscators such as de4dot.
- Anti-debug / anti-tamper, environment & tampering-tool detection, metadata hardening, and strong-name / Authenticode signing (Authenticode is Windows-only).
- Targets .NET Framework 4.8 → .NET 10 and .NET Standard 2.0/2.1 without changing the target framework.
Editions & licensing
The Free edition works with no license key. Pro and Enterprise unlock stronger and additional protections and require a license key from Delta-1 Labs. See pricing and the documentation.
License
Proprietary. Use is governed by the EULA. This tool is not open source. See the bundled license file for details.
© 2026 Delta-1 Labs · delta1labs.com · Support
| Product | Versions Compatible and additional computed target framework versions. |
|---|---|
| .NET | net8.0 is compatible. net8.0-android was computed. net8.0-browser was computed. net8.0-ios was computed. net8.0-maccatalyst was computed. net8.0-macos was computed. net8.0-tvos was computed. net8.0-windows was computed. net9.0 was computed. net9.0-android was computed. net9.0-browser was computed. net9.0-ios was computed. net9.0-maccatalyst was computed. net9.0-macos was computed. net9.0-tvos was computed. net9.0-windows was computed. net10.0 was computed. net10.0-android was computed. net10.0-browser was computed. net10.0-ios was computed. net10.0-maccatalyst was computed. net10.0-macos was computed. net10.0-tvos was computed. net10.0-windows was computed. |
This package has no dependencies.
1.1.5: built-in tamper telemetry ("report-home", tamperReportUrl) — a fired guard POSTs a minimal {"event":"…"} to your own endpoint before reacting; .NET and .NET Framework. 1.1.4: continuous environment checks (environmentChecksContinuous — AssemblyLoad hook, licensing call-site re-checks, jittered timer) and MonoMod.RuntimeDetour detection. 1.1.3: cross-platform CLI distribution (Linux/macOS/CI via dotnet tool); reference (proxy-call) obfuscation; environment & tampering-tool detection; configurable expiry guard; method-encryption anti-dump; Keyright-aware auto-protect for licensing code; metadata (#Strings heap) hardening.