Jekyll2019-04-20T19:35:31+01:00https://illuminopi.com/Novus ordo machinis2019-04-20T18:30:00+01:002019-04-20T18:30:00+01:00https://illuminopi.com/talks/2019/04/20/rcevil-first-post<p>At a BSidesIowa 2019 talk, Illuminopi members NoppyByNature and Msnyo shared how to abuse a .NET deserialziation ‘feature’ to gain remote code execution in Microsoft IIS. Check out the <a href="/assets/files/BSidesIowa_RCEvil.net_20190420.pdf" title="Slides">slide deck</a> from the talk “RCEvil.NET - A Super Serial Story”. You can also check out the <a href="https://github.com/illuminopi/RCEvil.NET" title="Code">accompanying C# project</a> released during the conference.</p>

At a BSidesIowa 2019 talk, Illuminopi members NoppyByNature and Msnyo shared how to abuse a .NET deserialziation ‘feature’ to gain remote code execution in Microsoft IIS. Check out the slide deck from the talk “RCEvil.NET - A Super Serial Story”. You can also check out the accompanying C# project released during the conference.