Skip to content

Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations

Notifications You must be signed in to change notification settings

mlcsec/ASRenum-BOF

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

ASRenum

Identify ASR rules, actions, and exclusion locations

Thanks to EspressoCake

ASRenum-BOF.cpp/.cna

$ make all
  • load cna

Screenshot from 2022-12-28 14-05-34

ASRenum.cpp

  • initial script

ASRenum.cs

beacon> inlineExecuteAssembly --dotnetassembly C:\Tools\ASRenum.exe
beacon> bofnet_executeassembly ASRenum

About

Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published