Skip to content

Execute Remote Assembly with args passing and with AMSI and ETW patching .

License

Notifications You must be signed in to change notification settings

m1ddl3w4r3/ExecRemoteNET

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 
 
 
 
 

Repository files navigation

ExecRemoteAssembly

Execute Remote Assembly with args passing and with AMSI and ETW patching

1 - the ExecRemoteAssembly is created only to run .NET assemblies , that are based on C#.
2 - the ExecRemoteAssembly accept URI of type :
https://domain.name/PathToUri
http://domain.name/PathToUri
[https/http]://ip:port/pathtoUri
[https/http]://ip/pathtoUri

ExecAMSI

IP

ipPort

Build

& "C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\MSBuild.exe" ExecRemoteNET.sln /p:Configuration=Release /p:Platform=x64 /verbosity:minimal

Credits

https://github.com/mez-0/InMemoryNET
This is an improved version of this project that supports AMSI & ETW patching and URI parsing

About

Execute Remote Assembly with args passing and with AMSI and ETW patching .

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published