dotnet-memshell
Three .NET memory shells at three distinct insertion positions - HttpModule pipeline, WebSocket connection takeover, Remoting URI registration. Zero impact on unmarked traffic, no new port, no web.config change, no file drop. 三个插入位互不相同、业务无感的 .NET 内存马。
Details
- External ID
- 1392202525
- Source
- GITHUB
- Company
- —
- Product
- dotnet-memshell
- Website domain
- github.com
- Launched
- Sept. 28, 2026
- Cohort
- —
- Upvotes
- 10
- Upvotes percentile
- 0.28183448629259544
- Tags
- aspnet, csharp, deserialization, dotnet, memory-shell, offensive-security, pentesting, security, websocket
- Fetched at
- Sept. 30, 2026, 5:02 p.m.
- Updated at
- Sept. 30, 2026, 5:02 p.m.
Enrichment
- Theme
- file transfer and sharing tools
- Vertical
- Security
- Function
- Dev tools
- Audience
- Developer
- AI stance
- Not AI
- Project type
- Hobby / open-source project
- Normalized one-liner
- memory shell implementations for .net applications
- Manually corrected
- False
Could you build this?
No In-memory stealth rootkits/memshells for .NET requiring zero file drops and low-level pipeline hijacking demand deep offensive security and internal runtime CLR knowledge.
What it would actually take: Requires deep internals knowledge of ASP.NET / IIS request pipelines, manipulating internal `HttpApplicationFactory` or `HttpModuleRegistry` reflection objects at runtime, hooking WebSocket streams, and hijacking .NET Remoting channel sinks without touching disk or configuration files. Demands specialized Windows offensive security research to bypass runtime detection and AMSI.
Competitors
Other products that read as similar to this one — 66 launches clear the similarity bar, closest 8 shown.
Attention rank: #48 of 67 (itself plus its competitors, highest first — normalized so YC and Product Hunt are compared fairly).
Launched 332 days after the earliest competitor.
- heapspace · github · 2026-09-28 · 83 upvotes · similarity 0.43
- Clone, a small Rust VMM, forks VMs in under 20ms via CoW · hn · 2026-04-19 · 11 upvotes · similarity 0.40
- Pipenet · hn · 2026-01-19 · 114 upvotes · similarity 0.39
- Shittp · hn · 2025-12-21 · 136 upvotes · similarity 0.39
- CVE-2026-42536-PoC · github · 2026-09-13 · 7 upvotes · similarity 0.38
- Scheme HTTP server with transparent async · hn · 2026-03-29 · 17 upvotes · similarity 0.37
- CVE-2026-88772 · github · 2026-09-27 · 13 upvotes · similarity 0.36
- Deadwire-HTTPD A triple-threaded x86-64 assembly static server · hn · 2026-07-17 · 5 upvotes · similarity 0.36
Other launches for this product
- No other launches for this product.
Same idea, different domain
Nobody's really built a dev tools tool for Sales yet.