bytecode77 / r77-rootkit

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.
https://bytecode77.com/r77-rootkit
BSD 2-Clause "Simplified" License
1.59k stars 389 forks source link

TestConsole without .NET Framework 4 #31

Closed APT-ZERO closed 2 years ago

APT-ZERO commented 2 years ago

Can you compile TestConsole to be able to run without .NET Framework 4 In Windows 7 / Windows Server 2008 can't run it without installing .NET Framework 4

bytecode77 commented 2 years ago

The rootkit itself is designed to run with any CLR - unlike the Test Console.

Since the Test Console is not part of the rootkit deployment and it would require to write code and all dependencies "the old way", it only works with .NET 4.7. I, too, use various VM's for my testing and therefore also have to install .NET 4.7 in those VM's. Kind of a bummer, but much less effort than writing a WPF application using .NET 3.5.