inject-assembly

inject-assembly - Execute .NET in an Existing Process This tool is an alternative to traditional fork and run execution for Cobalt Strike. The loader can be injected into any process, including the current Beacon. Long-running assemblies will continue to run and send output back to the Beacon,...

clrinject

clrinject Injiziert C EXE- oder DLL-Assemblys in jede CLR-Laufzeitumgebung und AppDomain eines anderen Prozesses. Die injizierte Assembly kann dann auf statische Instanzen der Klassen des Zielprozesses zugreifen und dessen internen Zustand beeinflussen. Verwendung clrinject-cli.exe -p -a Öffnet...

frostbyte

FrostByte Prologo: Negli ultimi giorni ho sperimentato con la tecnica di iniezione del gestore AppDomain e ho ottenuto un discreto successo nei miei precedenti impegni Red Team contro alcuni EDR. Sebbene sia molto valida come vettore di accesso iniziale, volevo rilasciare un POC che possa aiutare...

frostbyte

FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...

APT41-Linked Silver Dragon Targets Governments Using Cobalt Strike and Google Drive C2

Cybersecurity researchers have disclosed details of an advanced persistent threat APT group dubbed Silver Dragon that has been linked to cyber attacks targeting entities in Europe and Southeast Asia since at least mid-2024. "Silver Dragon gains its initial access by exploiting public-facing...

Exploit for Incorrect Comparison in Dynamic-Linq Linq

Dynamic Linq injection to RCE - CVE-2023-32571 About Dynami...

Donut - Generates X86, X64, Or AMD64+x86 Position-Independent Shellcode That Loads .NET Assemblies, PE Files, And Other Windows Payloads From Memory

Donut generates x86 or x64 shellcode from VBScript, JScript, EXE, DLL including .NET Assemblies files. This shellcode can be injected into an arbitrary Windows processes for in-memory execution. Given a supported file type, parameters and an entry point where applicable such as Program.Main, it...