dotnet.exe [PATH_TO_DLL]
Its just like doing python https://t.co/dvx2wILsOS. (funny)
dotnet.exe is trusted binary and Default AppLocker rule don’t block it so its a valid AppLocker bypass. Similar to regasm.exe.
CC @egre55 #lolbin
from _felamos
twit http://twitter.com/_felamos/status/1204705548668555264