.NET CLI; can execute arbitrary code and spawn shells Can also read arbitrary files, spawn an interactive shell.
dotnetdotnetSandbox: execFile · Timeout: 30s
system.file.read security.privilege-escalation.shell Outputs
process.output Command execution output
process_spawn Produces
process.output| Resource | Value |
|---|---|
| CPU | low |
| Memory | 16 MB |
| Network | none |
| Disk I/O | low |
Read arbitrary files
dotnet fsi
System.IO.File.ReadAllText("/path/to/input-file");;Spawn an interactive shell
dotnet fsi
System.Diagnostics.Process.Start("/bin/sh").WaitForExit();;dotnet is a command-line utility. .NET CLI; can execute arbitrary code and spawn shells Can also read arbitrary files, spawn an interactive shell.