GadgetToJScript

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts. (by med0x2e)

GadgetToJScript Alternatives

Similar projects and alternatives to GadgetToJScript

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better GadgetToJScript alternative or higher similarity.

GadgetToJScript reviews and mentions

Posts with mentions or reviews of GadgetToJScript. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-03-07.
  • You've been hit by / You've been struck by / An Exchange Exploit - So now what?
    3 projects | /r/sysadmin | 7 Mar 2021
    I'm sorry but most of this is not right. We can see in the attacker is running JScript code in memory using the eval function. There are no files dropped to disk and no child processes spawned here -- it's all in memory and all still inside the exchange web server process. At this point, it's impossible to know what JScript was executed, but it is possible (and not that difficult) to run whole .NET programs using JScript. From .NET there's nothing an attacker can't do. They could have easily run a beacon inside of the exchange webserver process without any files dropped to disk or processes spawned.

Stats

Basic GadgetToJScript repo stats
1
824
1.8
over 2 years ago

med0x2e/GadgetToJScript is an open source project licensed under GNU General Public License v3.0 only which is an OSI approved license.

The primary programming language of GadgetToJScript is C#.


Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com