Pentest Documentation

Appearance

🚀 Execute-Assembly ​

execute-assembly is a command that allows operators to run .NET assemblies directly in memory, without dropping them to disk. This makes it a powerful technique for executing malicious payloads stealthily, bypassing disk-based detection mechanisms such as antivirus (AV) and Endpoint Detection and Response (EDR) solutions.

🔧 Usage and Parameters ​

  1. Basic Syntax :
bash
execute-assembly --path /path/to/assembly.exe [args]
  1. Running SharpHound for AD Recon :
bash
execute-assembly --path /opt/tools/SharpHound.exe -- -c All