Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

C 

.net framework 2.x, 4.x to native win32

Does anyone know of a good solution for wrapping a .net exe in a native loader that invokes the .net runtime and loads the .net exe from memory?

I remember a while back there was a "net2nat" site that was up, its entirely possible

This is relevant to the C++ section as the loader is native win32
really nobody? I've done this before but it required a .net .dll to be written to disk. Is it possible to do entirely in memory?
It's over in the csharp section, by gigajew. Admittedly probably the wrong section.

Also just googling clr hosting would have given you some helpful resources too.
RunPE .net
[Image: bitcoin.png] Be Nice For Once 15hVUVz7xA4kazHdk2BuErENGCskVwjYXP
(Nov 27, 2019 04:20 AM)Zephyros Wrote:  It's over in the csharp section, by gigajew. Admittedly probably the wrong section.

Also just googling clr hosting would have given you some helpful resources too.

I would really really love to see this (the thread posted by gigajew), but I can't seem to find it. I recall he released some .net assembly process injection stuff not too long ago but that's obviously a different thing. Seems to be a talented coder.

OP the only way I knew of with absolutely 0 drops was inside of a sort of VM wrapper. This significantly reduces performance and increases filesize though. If gigajew released something then that is a different story of course.
(Nov 27, 2019 11:32 AM)Arenna Wrote:  I would really really love to see this (the thread posted by gigajew), but I can't seem to find it. I recall he released some .net assembly process injection stuff not too long ago but that's obviously a different thing. Seems to be a talented coder.

OP the only way I knew of with absolutely 0 drops was inside of a sort of VM wrapper. This significantly reduces performance and increases filesize though. If gigajew released something then that is a different story of course.

"This is relevant to the C++ section as the loader is native win32"
[Image: bitcoin.png] Be Nice For Once 15hVUVz7xA4kazHdk2BuErENGCskVwjYXP
Hello,

This can do it.

https://hackforums.net/showthread.php?tid=6044542

Nothing is written to disk.
(Jan 28, 2020 12:09 PM)Jean-Jacques Rousseau Wrote:  Hello,

This can do it.

https://hackforums.net/showthread.php?tid=6044542

Nothing is written to disk.

This requires the .NET framework to be installed, not what OP is asking for.
(Jan 29, 2020 10:00 AM)morph Wrote:  This requires the .NET framework to be installed, not what OP is asking for.

” Does anyone know of a good solution for wrapping a .net exe in a native loader that invokes the .net runtime and loads the .net exe from memory?”

That is exactly what my code does. If he wanted to silently install .NET, he would say so. It is still in Beta so I would need OPs feedback.
https://github.com/dotnet/corert/blob/ma...-corert.md

This will compile CIL to machine code.
They also provide a C++ transpiler.

https://github.com/dotnet/corert/blob/ma...-prompt.md
SRPP Discord Server

I am a professional network/cloud security architect.
My Old Tutorials
Here's my version of this https://hackforums.net/showthread.php?tid=6005424 requires dll on disk but that's it. Also you've obviously never heard of donut by the wover. This can convert your .NET assembly into a native (C++) shellcode loader, and your stub embedded or downloaded remotely. Works awesome and requires no dropped files to disk. Here's donut: https://github.com/TheWover/donut
[Image: Syr3DlV.png]
Hi, I'm new to this game. Is there any tool to convert .NET exe to native?

I want to execute the Exe on my computer which has no .NET Framework installed. If there is any better way to do this then convert it, please tell me.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by junkyfeet900Aug 6, 2024 10:29 PM 3 390 Aug 6, 2024 10:29 PM
Last Post: junkyfeet900
[.NET] by fisica638Feb 8, 2024 08:07 AM 8 555 Feb 8, 2024 08:07 AM
Last Post: fisica638
[.NET] by QuobiAug 6, 2022 02:23 PM 0 406 Aug 6, 2022 02:23 PM
Last Post: Quobi