SkillAgentSearch skills...

InMemoryNET

Exploring in-memory execution of .NET

Install / Use

/learn @mez-0/InMemoryNET
About this skill

Quality Score

0/100

Supported Platforms

Universal

README

InMemoryNET

This project is entirely a POC, it was my research into looking at how execute-assembly works within Cobalt Strike.

I originally wrote this about two years ago, but I felt I needed to update to download file remotely in order to test In-Process Patchless AMSI Bypass from EthicalChaos. Albeit, this project does NOT contain that POC.

InMemoryNET will:

  1. Reach out to a URL
  2. Download a file to a buffer
  3. Execute via CLR

Referenced projects:

  1. HostingCLR
  2. metasploit-execute-assembly
  3. Hiding your .NET - ETW

Example:

 ~ InMemoryNET ~
InMemoryNET.exe <url> <assembly args>

Related Skills

View on GitHub
GitHub Stars137
CategoryDevelopment
Updated14d ago
Forks25

Languages

C++

Security Score

100/100

Audited on Mar 19, 2026

No findings