Binary Exploitation

Analyzing .NET Executables

• .NET Compiler: wine

  • https://github.com/dnSpy/dnSpy/releases

• Run using wine on kali:

  • sudo apt install wine64 -y

  • wine dnSpy.exe

#AES Decryption
#python3
>>> import pyaes
>>> from base64 import b64decode
>>> key=b"c4scadek3y654321"
>>> IV=b"1tdyjCbY1Ix49842"
>>> aes = pyaes.AESModeOfOperationCBC(key, iv = IV)
>>> decrypted = aes.decrypt(b64decode('BQO5l5Kj9MdErXx6Q6AGOw=='))
>>> print(decrypted.decode())
w3lc0meFr31nd