Pentester's Promiscuous Notebook
search
⌘Ctrlk
TwitterGitHubBlog
Pentester's Promiscuous Notebook
  • README
  • ⚒️Pentest
    • C2
    • Infrastructure
      • AD
        • ACL Abuse
        • AD CS Abuse
        • ADIDNS Abuse
        • Attack Trusts
        • Attack RODCs
        • AV / EDR Evasion
          • .NET Assembly
            • .NET Config Loader
            • .NET Dynamic API Invocation
            • .NET In-Memory Assembly
            • .NET Reflective Assembly
          • AMSI Bypass
          • Application Whitelist Bypass
          • AppLocker Bypass
          • BYOVD
          • CLM Bypass
          • Defender
          • ETW Block
          • Execution Policy Bypass
          • Mimikatz
          • UAC Bypass
        • Authentication Coercion
        • Credentials Harvesting
        • Discovery
        • DnsAdmins
        • Dominance
        • gMSA / dMSA
        • GPO Abuse
        • Kerberos
        • Key Credentials Abuse
        • LAPS
        • Lateral Movement
        • LDAP
        • NTLM
        • Password Spraying
        • Post Exploitation
        • Pre-created Computers Abuse
        • PrivExchange
        • Privileges Abuse
        • RID Cycling
        • SCCM Abuse
        • SMB
        • Token Manipulation
        • User Hunt
        • WSUS
        • Zerologon
      • Azure AD
      • DevOps
      • DBMS
      • Authentication Brute Force
      • File Transfer
      • IPMI
      • Kiosk Breakout
      • Low-Hanging Fruits
      • LPE
      • Networks
      • NFS
      • Persistence
      • Pivoting
      • Post Exploitation
      • SNMP
      • SSH
      • TFTP
      • VNC
    • OSINT
    • Password Brute Force
    • Perimeter
    • Shells
    • Web
    • Wi-Fi
  • ⚔️Red Team
    • Basics
    • Infrastructure
    • Development
  • 🐞Exploit Dev
    • BOF
    • RE
    • WinDbg
  • ⚙️Admin
    • Git
    • Linux
    • Networking
    • Virtualization
    • Windows
gitbookPowered by GitBook
block-quoteOn this pagechevron-down
  1. ⚒️Pentestchevron-right
  2. Infrastructurechevron-right
  3. ADchevron-right
  4. AV / EDR Evasionchevron-right
  5. .NET Assembly

.NET Config Loader

  • https://gist.github.com/djhohnstein/afb93a114b848e16facf0b98cd7cb57barrow-up-right

  • https://gist.github.com/byt3bl33d3r/de10408a2ac9e9ae6f76ffbe565456c3arrow-up-right

  • https://pentestlaboratories.com/2020/05/26/appdomainmanager-injection-and-detection/arrow-up-right

  • https://www.mdsec.co.uk/2020/06/detecting-and-advancing-in-memory-net-tradecraft/arrow-up-right

  • https://www.rapid7.com/blog/post/2023/05/05/appdomain-manager-injection-new-techniques-for-red-teams/arrow-up-right

  • https://github.com/netbiosX/Ghostloaderarrow-up-right

  • https://github.com/Mr-Un1k0d3r/.NetConfigLoaderarrow-up-right

  • https://ipslav.github.io/2023-12-12-let-me-manage-your-appdomain/arrow-up-right

  • https://github.com/ipSlav/DirtyCLRarrow-up-right

Last updated 2 years ago