{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/2"}],"enrichment":{"capability":"dncil is a Python library for disassembling Common Intermediate Language (CIL) instructions from .NET managed methods, parsing headers, instructions, and exception handlers into an object-oriented API.","skillfed_tags":[".net-analysis","reverse-engineering","malware-analysis"],"use_cases":["Reverse-engineer .NET malware by disassembling and analyzing CIL instructions from suspicious executables.","Build automated CIL analysis tools to detect patterns, extract metadata, or validate .NET binary integrity.","Integrate .NET binary inspection into Python-based security pipelines without requiring C# or external tools.","Parse and inspect CIL method bodies to extract control flow, operands, and exception handling logic.","Develop educational tools or documentation generators that visualize or explain .NET bytecode."],"what_it_does":"dncil is a pure-Python library for parsing and analyzing Common Intermediate Language (CIL) bytecode from .NET managed methods. It exposes the structure of CIL through two main classes: CilMethodBody (representing a complete method with header, instructions, and exception handlers) and Instruction (representing individual CIL operations). The library is designed to let developers write CIL analysis and reverse-engineering tools in Python without needing C# expertise or C#-based tools like dnLib.\n\nTypically used alongside dnfile (a .NET metadata parser) to extract and disassemble managed methods from .NET executables. The library provides both low-level access (raw bytes, opcode/operand decomposition) and high-level helpers (instruction type checks, size queries, flag inspection). It is maintained by Mandiant's FLARE team and is positioned for security research, malware analysis, and .NET binary inspection workflows.","worth_installing":"Yes. dncil is a stable, actively maintained library with no security vulnerabilities, low install friction, and a permissive license. Install it if you need to analyze .NET CIL bytecode from Python\u2014particularly for malware analysis, reverse engineering, or security research. It is a specialized tool; install only if you have a concrete need to work with .NET managed methods."},"id":"dncil","links":{"html":"https://skillfed.io/packages/dncil","md":"https://skillfed.io/packages/dncil.md","pypi":"https://pypi.org/project/dncil/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2022-12-12","license_spdx":null,"license_treatment":"permissive","name":"dncil","python_support":"supports_current","summary":"The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions."},"popularity":{"monthly_downloads":181576,"position":10121,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.0.2"}