• Stars
    star
    155
  • Rank 233,342 (Top 5 %)
  • Language
    C#
  • License
    BSD 3-Clause "New...
  • Created over 4 years ago
  • Updated over 3 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

MSBuild Without MSBuild.exe

An updated version of this project resides at https://github.com/rvrsh3ll/NoMSBuild

MSBuildAPICaller

MSBuild Without MSBuild.exe

How to build and execute

Step 1: Build IEShim.cs

C:\Windows\Microsoft.Net\Framework\v4.0.30319\csc.exe /reference:"Microsoft.Build.Framework.dll";"Microsoft.Build.Tasks.v4.0.dll";"Microsoft.Build.Utilities.v4.0.dll" /target:library IEShim.cs

Step 2: Modify "projectPath" variable on line 60 of msbuildapicaller.cs to your needs

Example: string projectPath = '\\192.168.1.100\share\msbuildapicaller.csproj';

Step 3: Replace with your base64 encoded x64 shellcode in msbuildapicaller.csproj

Step 4: Replace AssemblyFile variable with the location of your compiled dll from step 1

Step 5: Build msbuildapicaller.cs

C:\Windows\Microsoft.Net\Framework\v4.0.30319\csc.exe /reference:"Microsoft.Build.Framework.dll";"Microsoft.Build.dll";"Microsoft.Build.Engine.dll";"Microsoft.Build.Utilities.v4.0.dll";"System.Runtime.dll" /target:exe msbuildapicaller.cs

Step 6: Execute msbuildapicaller.exe

More Repositories

1

Misc-Powershell-Scripts

Random Tools
PowerShell
770
star
2

FindFrontableDomains

Search for potential frontable domains
Python
559
star
3

TokenTactics

Azure JWT Token Manipulation Toolset
PowerShell
470
star
4

BOF_Collection

Various Cobalt Strike BOFs
C
444
star
5

CPLResourceRunner

Run shellcode from resource
C#
244
star
6

Rubeus-Rundll32

Run Rubeus via Rundll32
C#
171
star
7

SharpPrinter

Discover Printers
C#
161
star
8

SharpSMBSpray

Spray a hash via smb to check for local administrator access
C#
140
star
9

NoMSBuild

MSBuild without MSbuild.exe
C#
128
star
10

SharpCOM

CSHARP DCOM Fun
C#
112
star
11

SharpExcel4-DCOM

Port of Invoke-Excel4DCOM
C#
98
star
12

Azure-App-Tools

Collection of tools to use with Azure Applications
HTML
97
star
13

Word-Doc-Video-Embed-EXE-POC

HTML
92
star
14

SharpFruit

A C# penetration testing tool to discover low-haning web fruit via web requests.
C#
88
star
15

RendezvousRAT

Self-healing RAT utilizing libp2p
Go
84
star
16

MimeSpray

MimeCast Password Spraying Tool
Python
43
star
17

CrypoCurrencyPowerShell

PowerShell
30
star
18

FlaskRedirectorProtector

Protect your servers with a secret header
Python
28
star
19

MSSQLUDPScanner

Discover MSSQL Instances via UDP Scanning
C#
24
star
20

HashCant

Some Hashcat Rules for 2020 and beyond. Contributions encouraged!
24
star
21

PELoader

Load PE via XML Attribute
C#
23
star
22

OSGiScanner

Scan for OSGi Consoles
Python
21
star
23

SharpSSDP

SSDP Service Discovery
C#
16
star
24

UACSilentCleanup

C#
14
star
25

Carnac

Carnac The Magnificent: Pancakeswap Prediction Market Bot
Python
14
star
26

eavesarp

Analyze ARP requests to identify hosts that are communicating with one another.
Python
13
star
27

SharpEdge

C# Implementation of Get-VaultCredential
C#
12
star
28

FindIngressEmail

Find Inbound Email Domains
PowerShell
12
star
29

Armitage-Cortana-Resource-Opener

Open Resource Files in Armitage with Cortana
11
star
30

CanaryServer

Fake SMB and SAMR data
Python
10
star
31

POSH-Commander

Invoke remote powershell scripts in memory of compromised hosts.
Ruby
10
star
32

ADEnum

Active Directory Enumeration Tool
Python
6
star
33

SkiDzEX

A modded version of ConfuserEx | SkiDzEx
C#
6
star
34

OracleCommander

Oracle Commander
C#
6
star
35

X-Commander

MySQLlX Multitool
Python
6
star
36

BeaconSMS

Set Cobalt Strike Beacons to SMS you upon arrival.
6
star
37

Posh-Runas

PowerShell
5
star
38

azure_scripts

Scripts for attacking azure
Python
3
star
39

glorious-wizard

HTML
3
star
40

rvrsh3ll

things
1
star
41

MalDoc-Embedded-EXE-Bin-

This is a technique one can use for their MalDoc.
Visual Basic .NET
1
star
42

rvrsh3ll.github.io

Python
1
star