TransactionManagerReenlist
plugin
Generates payload for the TransactionManager.Reenlist method
Declared metadata, not a runtime result. How to read evidence.
.\ysonet.exe -p TransactionManagerReenlist -hTarget declarations
Runtime tokens: net-fx-2.0, net-fx-3.0, net-fx-3.5, net-fx-4.0, net-fx-4.5, net-fx-4.5.1, net-fx-4.5.2, net-fx-4.6, net-fx-4.6.1, net-fx-4.6.2, net-fx-4.7, net-fx-4.7.1, net-fx-4.7.2, net-fx-4.8, net-fx-4.8.1.
Structured formatter and requirement metadata is not declared. Read the description and option help for conditions.
Options (8)
| Option | Help | Default | Required |
|---|---|---|---|
c|command= | the command to be executed Required. | Not declared | true |
g|gadget= | a gadget chain that supports BinaryFormatter. Default: TextFormattingRunProperties. Default value: "TextFormattingRunProperties". Values: see --list gadgets. | TextFormattingRunProperties | false |
t|test | whether to run payload locally. Default: false | false | false |
minify | Whether to minify the payloads where applicable (experimental). Default: false | false | false |
ust|usesimpletype | This is to remove additional info only when minifying and FormatterAssemblyStyle=Simple. Default: true | true | false |
rawcmd | Command will be executed as is without `cmd /c ` being appended (anything after the first space is an argument). Default value: "false". | false | false |
legacyfx | Target the .NET Framework 2.0/3.0/3.5 (CLR v2) generation. This reaches the GADGET only; this plugin's own 5-byte frame names no framework assembly, so it needs no rewriting. Default: false | false | false |
i-understand-dos | Acknowledge that a denial-of-service gadget can disrupt or terminate the target process. It is required to generate one and is not needed by any other gadget. Default value: "false". | false | false |
Credit: Soroush Dalili