Главная
Study mode:
on
1
Introduction
2
Overview
3
Who am I
4
Agenda
5
Motivation
6
Generating NET Assembly
7
NET Assembly Format
8
NET Languages
9
Why C
10
Interoperability
11
Embedding
12
Common Issues
13
IronPython
14
Code Examples
15
Code Example
16
Invoke Jumpscare
17
Shell Code
18
Clear Script
19
Clear Script Demo
20
Other Scripting Languages
21
Builtin Compilers
22
Silent Trinity
23
Asynchronous
24
How It Works
25
Demo
26
MiniDump
27
Detection
Description:
Explore the fusion of .NET with scripting languages in this 54-minute conference talk from 44CON Information Security Conference. Delve into the world of BYOI (Bring Your Own Interpreter) payloads as Marcello Salvati guides you through generating .NET assemblies, understanding interoperability, and embedding various scripting languages. Learn about common issues, examine code examples, and witness demonstrations of IronPython and ClearScript. Discover the power of built-in compilers, asynchronous execution, and Silent Trinity. Gain insights into how these techniques work and their potential impact on security. Conclude with a discussion on MiniDump and detection methods, equipping you with valuable knowledge for both offensive and defensive cybersecurity practices.

BYOI Payloads - Fusing the Power of .NET With a Scripting Language of Your Choosing

44CON Information Security Conference
Add to list
0:00 / 0:00