RunDotNetDll - It is a simple utility to list all methods of a given .NET Assembly and to invoke them.

RunDotNetDll allows to introspect a given .NET Assembly in order to list all the methods which are implemented in the Assembly and to invoke them. All this is done via pure Reflection using dnlib library.

I created this utility in order to easily analyze malicious .NET programs that load at runtime additional .NET Assembly. Once that you have extracted the Assembly you need a mean to run it but if it is a DLL is not so easy.

With RunDotNetDll you can invoke a specific method of the given Assembly.

Release Download

• Source code
• Download binary

Usage

RunDotNetDll has a syntax similar to RunDll32, it accepts a DLL and a method name (or its metadata token) to invoke. If no method is provided, a list of all defined methods is displayed.

Find below an example of execution:

Authors

• Antonio Parata - Core Developer - s4tan

License

RunDotNetDll is licensed under the MIT license