AssemblyCatalogLoad

gadget

MEF AssemblyCatalog(codeBase) opens -c and loads it as an assembly. A UNC path also starts an SMB session, which sends authentication material. The load alone runs no code.

Declared metadata, not a runtime result. How to read evidence.

.\ysonet.exe -g AssemblyCatalogLoad -h

Target declarations

Variant	Formatters	Inputs	Requirements	Runtime tokens
Default	Xaml	assembly-file, unc-path, target-path	built-in, net-framework	net-fx-4.0, net-fx-4.5, net-fx-4.5.1, net-fx-4.5.2, net-fx-4.6, net-fx-4.6.1, net-fx-4.6.2, net-fx-4.7, net-fx-4.7.1, net-fx-4.7.2, net-fx-4.8, net-fx-4.8.1

Options (1)

Option	Help	Default	Required
rawinput	Pass -c verbatim into the payload template instead of escaping it for the selected formatter. Use this only for already-escaped input. Default value: "false".	false	false

Credit: [Finders: Soroush Dalili]

All modules · Full catalog JSON