all InfoSec news
RogueAssemblyHunter - Rogue Assembly Hunter Is A Utility For Discovering 'Interesting' .NET CLR Modules In Running Processes
Rogue Assembly Hunter is a utility for discovering 'interesting' .NET CLR modules in running processes.
- Author: @bohops
- License: MIT
- Project: https://github.com/bohops/RogueAssemblyHunter
.NET is a very powerful and capable development platform and runtime framework for building and running .NET managed applications. Over the last several years, .NET has been adopted by Red Teams (and likes thereof) for instrumenting tradecraft to support offensive operations. In particular, the shift from offensive PowerShell to .NET was a logical leap (for many) due to …