GadgetTo[removed]用于生成 .NET 序列化小工具的工具,当使用来自基于 JSVBSVBA 的脚本的 BinaryFormatter 反序列化时,该工具可以触发 .NET 程序集加载执行-源码

上传者: 42098759 | 上传时间: 2021-08-04 14:05:36 | 文件大小: 78KB | 文件类型: ZIP
C#
描述 用于生成 .NET 序列化小工具的工具,当使用来自 JS/VBS/VBA 脚本的 BinaryFormatter 进行反序列化时,可以触发 .NET 程序集加载/执行。 当前的小工具在使用来自 jscript/vbscript/vba 的 BinaryFormatter 反序列化时会触发对 Activator.CreateInstance() 的调用,这意味着它可用于通过默认/公共构造函数触发您选择的 .NET 程序集的执行。 该工具的创建主要用于为 RT 参与(初始访问、横向移动、持久性)自动化 WSH 脚本武器化,用于 PoC 的 shellcode 加载器被删除并替换为在 TestAssembly 项目中实现的示例程序集。 细节: 无需更新 AmsiEnable 注册表项或劫持加载库 (AMSI.dll) 即可绕过 AMSI。 绕过 .NET 4.8+ 新引入的用于阻止“A

文件下载

资源详情

[{"title":"( 32 个子文件 78KB ) GadgetTo[removed]用于生成 .NET 序列化小工具的工具,当使用来自基于 JSVBSVBA 的脚本的 BinaryFormatter 反序列化时,该工具可以触发 .NET 程序集加载执行-源码","children":[{"title":"GadgetToJScript-master","children":[{"title":"TestAssembly","children":[{"title":"Program.cs <span style='color:#111;'> 184B </span>","children":null,"spread":false},{"title":"TestAssembly.csproj <span style='color:#111;'> 2.37KB </span>","children":null,"spread":false},{"title":"App.config <span style='color:#111;'> 189B </span>","children":null,"spread":false},{"title":"Properties","children":[{"title":"AssemblyInfo.cs <span style='color:#111;'> 1.40KB </span>","children":null,"spread":false}],"spread":true}],"spread":true},{"title":"LICENSE <span style='color:#111;'> 34.32KB </span>","children":null,"spread":false},{"title":"GadgetToJScript.sln <span style='color:#111;'> 2.25KB </span>","children":null,"spread":false},{"title":"README.md <span style='color:#111;'> 5.98KB </span>","children":null,"spread":false},{"title":"GadgetToJScript","children":[{"title":"packages.config <span style='color:#111;'> 141B </span>","children":null,"spread":false},{"title":"Program.cs <span style='color:#111;'> 12.85KB </span>","children":null,"spread":false},{"title":"App.Config <span style='color:#111;'> 186B </span>","children":null,"spread":false},{"title":"templates","children":[{"title":"GT4_8","children":[{"title":"htascript.template <span style='color:#111;'> 1.56KB </span>","children":null,"spread":false},{"title":"jscript-regfree.template <span style='color:#111;'> 2.34KB </span>","children":null,"spread":false},{"title":"jscript.template <span style='color:#111;'> 1.14KB </span>","children":null,"spread":false},{"title":"vbascripthex.template <span style='color:#111;'> 2.10KB </span>","children":null,"spread":false},{"title":"vbascriptb64.template <span style='color:#111;'> 2.21KB </span>","children":null,"spread":false},{"title":"vbscript.template <span style='color:#111;'> 1.17KB </span>","children":null,"spread":false}],"spread":true},{"title":"LT4_8","children":[{"title":"htascript.template <span style='color:#111;'> 1.31KB </span>","children":null,"spread":false},{"title":"jscript-regfree.template <span style='color:#111;'> 1.83KB </span>","children":null,"spread":false},{"title":"htascript-regfree.template <span style='color:#111;'> 2.21KB </span>","children":null,"spread":false},{"title":"jscript.template <span style='color:#111;'> 922B </span>","children":null,"spread":false},{"title":"vbascripthex.template <span style='color:#111;'> 1.76KB </span>","children":null,"spread":false},{"title":"vbascriptb64.template <span style='color:#111;'> 1.80KB </span>","children":null,"spread":false},{"title":"vbscript.template <span style='color:#111;'> 660B </span>","children":null,"spread":false}],"spread":true}],"spread":true},{"title":"_DisableTypeCheckGadgetGenerator.cs <span style='color:#111;'> 3.31KB </span>","children":null,"spread":false},{"title":"GadgetToJScript.csproj <span style='color:#111;'> 4.95KB </span>","children":null,"spread":false},{"title":"_AssemblyLoader.cs <span style='color:#111;'> 2.02KB </span>","children":null,"spread":false},{"title":"_ASurrogateGadgetGenerator.cs <span style='color:#111;'> 5.53KB </span>","children":null,"spread":false},{"title":"Properties","children":[{"title":"AssemblyInfo.cs <span style='color:#111;'> 2.30KB </span>","children":null,"spread":false}],"spread":false},{"title":"_SurrogateSelector.cs <span style='color:#111;'> 859B </span>","children":null,"spread":false}],"spread":true},{"title":"packages","children":[{"title":"NDesk.Options.0.2.1","children":[{"title":".signature.p7s <span style='color:#111;'> 9.21KB </span>","children":null,"spread":false},{"title":"NDesk.Options.0.2.1.nupkg <span style='color:#111;'> 24.27KB </span>","children":null,"spread":false},{"title":"lib","children":[{"title":"NDesk.Options.dll <span style='color:#111;'> 21.50KB </span>","children":null,"spread":false}],"spread":true}],"spread":true}],"spread":true}],"spread":true}],"spread":true}]

评论信息

免责申明

【只为小站】的资源来自网友分享,仅供学习研究,请务必在下载后24小时内给予删除,不得用于其他任何用途,否则后果自负。基于互联网的特殊性,【只为小站】 无法对用户传输的作品、信息、内容的权属或合法性、合规性、真实性、科学性、完整权、有效性等进行实质审查;无论 【只为小站】 经营者是否已进行审查,用户均应自行承担因其传输的作品、信息、内容而可能或已经产生的侵权或权属纠纷等法律责任。
本站所有资源不代表本站的观点或立场,基于网友分享,根据中国法律《信息网络传播权保护条例》第二十二条之规定,若资源存在侵权或相关问题请联系本站客服人员,zhiweidada#qq.com,请把#换成@,本站将给予最大的支持与配合,做到及时反馈和处理。关于更多版权及免责申明参见 版权及免责申明