Rare find

ExecuteAssembly. Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers, Unlinking .NET related modules, bypassing ETW+AMSI, avoiding EDR hooks via NT static syscalls (x64) and hiding imports by dynamically resolving APIs (hash).

github.com/med0x2e/ExecuteAssembly

Vaya's read on this project

Problem, audience, market, and the verdict — sign in to see it.

Updates

No recent activity.