Jump to content
YOUR-AD-HERE
HOSTING
TOOLS
SERVICE

Locked Shed - .NET Runtime Inspector v2.0.0


itsMe

Recommended Posts

This is the hidden content, please

 

Shed is an application that allow to inspect the .NET runtime of a program in order to extract useful information. It can be used to inspect malicious applications in order to have a first general overview of which information are stored once that the malware is executed.

Shed is able to:

  •     Inject a .NET Assembly in a remote process (both managed and un-managed)
  •     Extract all objects stored in the managed heap
  •     Print strings stored in memory
  •     Save the snapshot of the heap in a JSON format for post-processing
  •     Dump all modules that are loaded in memory


This is the hidden content, please

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.