### Let's turn Any .NET Application into an LOL Bin We can do this by experimenting with .config files. Many defenders catch/detect files that are renamed, they do this by matching Original Filename to Process Name In this example, we don't have to rename anything. We simple coerce a trusted signed app to load our Assembly. We do this by directing the application to read a config file we provide. See Poc Below. Steps to reproduce. ``` 1. Copy some binary you love to say, c:\Test. Lets use aspnet_compiler.exe as an example 2. Compile the test.cs to test.dll and put it in C:\Test 3. Rename app.config to aspnet_compiler.exe.config 4. Execute aspnet_compiler.exe 5. Profit :) ``` Questions/Comments Welcome.