MzHmO

import OpenSSL
from Crypto.PublicKey import RSA
from dsinternals.common.cryptography.RSAKeyMaterial import RSAKeyMaterial
from OpenSSL import crypto
from asn1crypto import core as asn1core
from asn1crypto import x509 as asn1x509

class X509Certificate2(object):
    def __init__(self, subject, keySize=2048, notBefore=0, notAfter=365, sid=None):
        self.key = None

MzHmO

using System;
using System.IO;
using IronPython.Hosting;
using Microsoft.Scripting.Hosting;

class Program
{
    static void Main(string[] args)
    {
        var engine = Python.CreateEngine();

MzHmO

using System;
using IronPython.Hosting;
using Microsoft.Scripting.Hosting;

class Program
{
    static void Main(string[] args)
    {
        
        var engine = Python.CreateEngine();

MzHmO

using System;
using System.IO;
using IronPython.Hosting;
using Microsoft.Scripting.Hosting;

class Program
{
    static void Main(string[] args)
    {
        var engine = Python.CreateEngine();

MzHmO

#include <windows.h>
#include <iostream>
#include <fstream>
#include <string>
#include <filesystem>
#include <netfw.h>

#pragma comment(lib, "ole32.lib")
#pragma comment(lib, "oleaut32.lib")

MzHmO

using System;
using System.IO;
using System.Reflection;
using System.Collections.Generic;
using System.Threading.Tasks;

class AssemblyStatistics
{
    static void Main()
    {

MzHmO

Заголовочный:

#include <Windows.h>
#include <algorithm>
#include <iostream>
#include <sddl.h>
#include <aclapi.h>
#include <NTSecAPI.h>
#include <TlHelp32.h>

MzHmO

using Accord.Video.FFMPEG;
using AForge.Video;
using AForge.Video.DirectShow;
using System;
using System.Drawing;
using System.Threading;
using System.Windows.Forms;

class Program
{

MzHmO

EXE файл загрузчик:

#include <Windows.h>
#include <windowsx.h>
#include "Header.h"

HMODULE hHookDll = NULL;


BOOL(CALLBACK* SetKeyboardHook)();

MzHmO

#include <windows.h>
#include <stdio.h>
#define RTL_MAX_DRIVE_LETTERS 32
#define RTL_USER_PROC_PARAMS_NORMALIZED 0x00000001
#define STATUS_SUCCESS 0
#define NT_SUCCESS(Status) ((NTSTATUS)(Status) == STATUS_SUCCESS)

// https://github.com/RedTeamOperations/Advanced-Process-Injection-Workshop/blob/66a2d3ffe6540c981182a2fb38cc92b0909c4b7f/CWLProcessDoppelganging/CWLProcessDoppelganging/CWLImplant.cpp
// https://github.com/huntandhackett/concealed_code_execution/blob/e688551bac50d8525b4ca7490da3981999cbff52/Injection/SampleDlls/3.NoDependencies/dllmain.c