search

nbaertsch / AutoAppDomainHijack

Automated .NET AppDomain hijack payload generation
GNU General Public License v3.0
112 stars 18 forks source link

Fixed C2 inline-execute functionality #6

Closed nbaertsch closed 1 month ago

nbaertsch commented 1 month ago

Moved payload execution to the app domain constructor to avoid detonation on inline-execute calls from C2 shellcode. Payload now correctly detonates only once per process.