Skip to content
← LibraryTechnique entry
LOL-MSBUILDExecution

msbuild.exe Inline C# Compile

MSBuild XML with Inline Task runs attacker-supplied C# — works because msbuild is signed and present on .NET-dev machines.

§ Where this technique fits

LOL-MSBUILD is catalogued under the Execution tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.