Skip to content

Instantly share code, notes, and snippets.

@cryptolok
Created November 6, 2024 11:43
Show Gist options
  • Save cryptolok/3cd4d688389896db8bdcd0d1d48b3041 to your computer and use it in GitHub Desktop.
Save cryptolok/3cd4d688389896db8bdcd0d1d48b3041 to your computer and use it in GitHub Desktop.
Windows .NET 4 Framework derandomizer
This patched clr.dll ommits windows syscall via advapi32.dll to generate random numbers, insted it will always produce 0 as result
can be tested with Get-Random in powershell
DLL : https://drive.google.com/file/d/1NnMe7jjtOyQR8AeRptv75mquE6uGnsZe/view
Put the dll file to C:\WINDOWS\Microsoft.NET\Framework64\v4.* and not forget to copy and backup the current version
or inject the dll to the process directly
Use at your own risk
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment