William Knowles

Adds the option to use MemoryStreams to store the JSON, which are used as pseudo-files during the zipping process (`--MemoryOnlyJSON`). This avoids needing to drop the JSON files to disk....

Added bofnet_executeassembly for calling entry point on standard .NET assemblies

7

Adds `bofnet_executeassembly` function to execute standard .NET assemblies in-process through BOF.NET. Arguments can be optionally supplied. Console output is captured in a memory stream then returned through `BeaconConsole.WriteLine()`. Thanks for...

Bug: script block logging bypass not working

5

**Config:** * commit `3c3e059` (currently the latest) compiled with the default configuration for .NET 4. * Tested against Server 2016 and Windows 10 (from DetectionLab) * Execution via CNA script...

[Feature Request] DarkLoadLibrary for DLL Imports

5

Hey, great tool. Are there any near-term plans to add DarkLoadLibrary loading for a DLL's dependencies/imports? They're current just using LoadLibrary, and I can see you added a note to...

DownloadFile() not working with bofnet_job

1

Hey, Really appreciate the effort that's gone into supporting the undocumented BOF functionality. I've run into an issue with `DownloadFile()`. It appears to work fine with `bofnet_execute` but throws a...