v2026.8.1 release notes
New sponsors
Section titled “New sponsors”Thank you to @cjm00n and @sinsinology for funding this release.
Highlights
Section titled “Highlights”--legacyfx retargets payload assembly identities at the .NET Framework 2.0/3.0/3.5
generation, and a shipped CLR2 host lets -t prove it fires on a real CLR 2 process. No
more guessing which runtime your chain lands on.
Also in this drop:
- 12 new gadgets (50 -> 62)
- TypeConfuseDelegate split for NetFx35 / NetFx40 / PowerShell
- Runtime version claims now EARNED by an observed fire, not assumed. New test tiers deserialize real payloads on a CLR 2 process and on a genuine .NET Framework 4.0 victim
- 508 references archived locally, so the technique outlives the blog post