Csi.exe.md

Csi.exe

csi.exe file
Use csi.exe to run unsigned C# code.

• Windows binary: False

• Bypasses Default AppLocker Rules: False

• Mitre:

• Links:

  • https://twitter.com/subTee/status/781208810723549188
  • https://enigma0x3.net/2016/11/17/bypassing-application-whitelisting-by-using-dnx-exe/

• File path:

  • c:\Program Files (x86)\Microsoft Visual Studio\2017\Community\MSBuild\15.0\Bin\Roslyn\csi.exe
  • c:\Program Files (x86)\Microsoft Web Tools\Packages\Microsoft.Net.Compilers.X.Y.Z\tools\csi.exe

• Acknowledgement:

  • Name: Casey Smith
    • Twitter: @Subtee
    • Blog: https://subt0x11.blogspot.com/

OS: