search

S3cur3Th1sSh1t / Invoke-Sharpcradle

Load C# Code straight to memory
BSD 3-Clause "New" or "Revised" License
53 stars 9 forks source link

[Warning] Add-Type command still touches disk #1

Open GetRektBoy724 opened 3 years ago

GetRektBoy724 commented 3 years ago

Just a warning, Add-Type command still touches the disk cause it still needs to compile it (Just-In-Time). The better way is just compile it ahead of time, and then convert it into base64, and use Reflection.Assembly to load the base64.

S3cur3Th1sSh1t commented 3 years ago

Yeah I knew that already. But the part on disk was never caught for me in any environment. Assembly::load would not work here as AMSI would catch the code when it's loaded. I won't provide signature updates here and therefore it will stay like it is.

But the warning can stay alive for others using it.

GetRektBoy724 commented 3 years ago

ahhh ok then :smile: