Introducing BetaFast – NetSPI's Vulnerable Thick Client

Covers assembly protections like ASLR, DEP, SafeSEH, and Authenticode signing, shows how PESecurity flags unsigned binaries, and explains decompiling .NET assemblies to review code.

Evil SQL Client (ESC) is a .NET console for SQL Server discovery, access, and data exfiltration, runnable via a plain exe, MSBuild inline tasks, or PowerShell reflection for stealthy red team work.

Part one of the thick client series covers GUI testing for Windows Forms and WPF apps, using WinSpy, Window Detective, and Snoop to reveal masked passwords and bypass client-side checks.

NetSPI shows why .NET SecureString still leaks passwords in memory via NetworkCredential, and demonstrates safer login handling using pinned mutable byte arrays instead of immutable strings.

Alexander Leary updates RunDotNetDll32 to load .NET assemblies via Type.GetType instead of suspicious Assembly.LoadFile calls, executing DLL methods while dodging common detection logic.

NetSPI shows how malicious Azure Container Registry tasks can generate and export tokens for attached Managed Identities, releasing a MicroBurst tool, Invoke-AzACRTokenGenerator, to automate it.