RCEvil.NET - BSidesIowa 2019

At a BSidesIowa 2019 talk, Illuminopi members NoppyByNature and Msnyo shared how to abuse a .NET deserialziation ‘feature’ to gain remote code execution in Microsoft IIS. Check out the slide deck from the talk “RCEvil.NET - A Super Serial Story”. You can also check out the accompanying C# project released during the conference.