DotNetToJScript AMSI Bypass

2 years ago
35

DotNetToJScript is an excellent tool to bypass security devices. Earlier I showed using Sharpshooter quicker version of it as its built in python. However these days, security tools have Sharpshooter signatured so it is not Opsec friendly. In this scenario, I create a payload in csharp with msfvenom. From here, add this shellcode into the byte array of the below code. The code uses Win32 APIs from kernel32.dll to do its memory mapping. After compiling, we must use DotNetToJScript.exe to convert the file into a weaponized format, js.

Loading comments...