Awesome
RemoteNET Spy
RemoteNetSpy.exe
is a GUI application utilizing the RemoteNET library.
Use this app to research and explore .NET apps:
- Find loaded assemblies & types
- Find and inspect every object instance
- Quickly set hooks on methods to trace when they're called.
✳️ Download compiled binaries at the Releases page.
Installation
- Install .NET 7.
- Install Microsoft Visual C++ 2015-2022 Redistributable (x64).
- Download the
zip
file from the Releases page. - Run
RemoteNetSpy.exe
rnet-kit
This repo also contains other programs that use RemoteNET.
Together with RemoteNetSpy, they are called the rnet-kit.
Every other program has a command-line interface and is meant for specific, "lower-level", tasks.
RemoteNetSpy uses some of those command-line programs to gather information and operate.
Using RemoteNetSpy itself should be enough for most research use-cases.
The other utilities in this repo:
rnet-trace.exe
Hooks arbitrary methods and prints when they are called and with which parameters.rnet-dump.exe
Dump specific peices of info from a .NET process. Like Assemblies, Types, Object instances in the heap.rnet-ps.exe
List injectable .NET processes in the system. Only processes that return from rnet-ps can be used with the other utils.rnet-repl.exe
A REPL console that allows low level access to a target app. You can grab objects, exmaine or modify them, hook methods and even inejct other .NET assemblies.
Thanks
icons8 for the "Puppet" icon