
OffensiveDLR
Toolbox containing research notes & PoC code for weaponizing .NET's DLR
code-analysiscommand-and-controldynamic-code-analysis+9
526

Toolbox containing research notes & PoC code for weaponizing .NET's DLR

Code execution/injection technique using DLL PEB module structure manipulation

RustyWater represents the main payload and the backbone of the entire adversarial operation in Static Kitten group attacks.

Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers,…

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

My experiments in weaponizing Nim (https://nim-lang.org/)