Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Detection for AppHost executables #248

Open
ElonGaties opened this issue Dec 2, 2024 · 1 comment
Open

Detection for AppHost executables #248

ElonGaties opened this issue Dec 2, 2024 · 1 comment

Comments

@ElonGaties
Copy link

Self contained .NET Core applications, when compiled, produce a native executable (AppHost), these AppHost executables sometimes contain the actual DLL which is then extracted and ran.

Is it possible for a detection for these types of executables to be found and possibly even an extractor in order to extract the DLL from within DiE.

@DosX-dev
Copy link
Collaborator

DosX-dev commented Dec 2, 2024

Hello! You can use the "Extractor" function to search for resources in PE. In the case of SelfContained, there will be a lot of unnecessary runtime libraries, but you can sort it manually with only dnSpy at hand.

If we are talking about automating the process specifically for the current case, then we will consider your offer. Thanks for the issue!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants