Awesome
ASRenum
Identify ASR rules, actions, and exclusion locations
Thanks to EspressoCake
ASRenum-BOF.cpp/.cna
$ make all
- load cna
ASRenum.cpp
- initial script
ASRenum.cs
beacon> inlineExecuteAssembly --dotnetassembly C:\Tools\ASRenum.exe
beacon> bofnet_executeassembly ASRenum