There are no reviews yet. Be the first to send feedback to the community and the maintainers!
ο»ΏThis file is part of DotNetToJScript - A tool to generate a JScript which bootstraps an arbitrary .NET Assembly and class. Copyright (C) James Forshaw 2017 DotNetToJScript is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. DotNetToJScript is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with DotNetToJScript. If not, see <http://www.gnu.org/licenses/>. Usage Notes: This only works from full trust JScript(obviously), so should work in scriptlets etc. By default it will only works if v2/v3/v3.5 is installed. However if you specify the '-ver auto' switch when building the output it will also work on v4+ only, however that will introduce a dependency on WScript.Shell which you might not want. To use this you'll need to create an assembly which targets .NET 2 (though in most cases you can also use 3.5 as you don't tend to see .NET 2 installed in isolation. In the assembly implement a class called TestClass which does something you want to do in the public, parameterless constructor. public class TestClass { public TestClass() { /* Start notepad */ Process.Start("notepad.exe"); } } Ensure it's public. Then pass to this tool the path to the .NET assembly. If you annotate the class with the ComVisible attribute you can even interact with the object after it's created. e.g. [ComVisible(true)] public class TestClass { public void DoSomething(string arg) { } } You can change the name of the entry class by using the -c switch and adding the name. You can also get the tool to add additional code to interact with the object by specifying the -s parameter with the path to a text file containing the additional JScript. The created object is named 'o', so for example if you wanted to call the DoSomething method load a file containing: o.DoSomething("SomeArg"); The default mode is to output a JScript file which can be executed in Windows Scripting Host. However if you want a scriptlet pass either -m (for a scriptlet which can be used from a scriptlet moniker) or -u (for a scriptlet which can be used from regsvr32). You can also specify the '-l vba' switch to output a VBA file which should work in Office Macros or '-l vbscript' for VBScript. Finally by default the tool will output to stdout, you can output direct to a file using the -o switch.
oleviewdotnet
A .net OLE/COM viewer and inspector to merge functionality of OleView and Test ContainerExploitRemotingService
A tool to exploit .NET Remoting Servicesblackhat-usa-2022-demos
Demos for the Blackhat USA 2022 talk "Taking Kerberos to the Next Level"WindowsRpcClients
This respository is a collection of C# class libraries which implement RPC clients for various versions of the Windows Operating System from 7 to Windows 10.windows-logical-eop-workshop
CANAPE.Core
A network proxy library written in C# for .NET Core based on CANAPEinfosec-presentations
A repository of previous info-sec presentations I've presented.IE11SandboxEscapes
Some example source code for fixed IE11 sandbox escapes.DeviceGuardBypasses
A repository of some of my Windows 10 Device Guard BypassesExploitDotNetDCOM
A tool to exploit .NET DCOM for EoP and RCE. Is fixed in latest versions of the .NET.WindowsRuntimeSecurityDemos
Demos for Presentation on Windows Runtime SecurityDotNetInteropDemos
A set of demos and a PowerShell module to interact with DotNetInterop.windows-attacksurface-workshop
Workshop material for a Windows Attack Surface Analysis WorkshopZeroNights2017
Some sample code from my Zero Nights 2017 presentation.ExampleChatApplication
A simple example chat application written for .NET Core to learn network protocol analysis.Zer0Con_2018
Repository for my talk on Desktop Bridge at Zer0Con 2018.DumpReparsePoints
This is a simple tool to dump all the reparse points on an NTFS volume.setsidmapping
Simple tool to use LsaManageSidNameMapping get LSA to add or remove SID to name mappings.44con_2014
Materials for 44con 2014 CANAPE WorkshopSuperFunkyChat
An example binary protocol application for learning CANAPEbh2014
Built binaries for BH 2014 workshopAxHell
A simple exploitable ActiveX control for RE/VRcanape-ssl-mitm-osx
A simple CANAPE extension to exploit iOS/OSX SSL vulnerabilitysaturndebug
My old old sega saturn debugger, for information purposesre
Some simple reverse engineering resourcesprxtool
Sourcey-Jack
Simple injection project to convert network connections to SOCKSpsplinkusb
Kanjidic-OSX
A project to convert Jim Breen's Kanji Dictionary to the OSX dictionary.app formatLove Open Source and this site? Check out how you can help us