Created
November 6, 2024 11:43
-
-
Save cryptolok/3cd4d688389896db8bdcd0d1d48b3041 to your computer and use it in GitHub Desktop.
Windows .NET 4 Framework derandomizer
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This patched clr.dll ommits windows syscall via advapi32.dll to generate random numbers, insted it will always produce 0 as result | |
can be tested with Get-Random in powershell | |
DLL : https://drive.google.com/file/d/1NnMe7jjtOyQR8AeRptv75mquE6uGnsZe/view | |
Put the dll file to C:\WINDOWS\Microsoft.NET\Framework64\v4.* and not forget to copy and backup the current version | |
or inject the dll to the process directly | |
Use at your own risk |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment