ASRenum-BOF
ASRenum-BOF copied to clipboard
Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations
ASRenum
Identify ASR rules, actions, and exclusion locations
Thanks to EspressoCake
ASRenum-BOF.cpp/.cna
$ make all
- load cna
ASRenum.cpp
- initial script
ASRenum.cs
beacon> inlineExecuteAssembly --dotnetassembly C:\Tools\ASRenum.exe
beacon> bofnet_executeassembly ASRenum