mirror of
https://github.com/SpecterOps/Nemesis
synced 2026-06-08 12:36:42 +00:00
Lee Chagolla-Christensen
07f4841d6b
- Accept main's infra changes (SeaweedFS, Dapr 1.17, Titus scanner) - Port NoseyParker→Titus rename + ValidationResult into refactored models/ - Delete noseyparker_scanner (replaced by titus_scanner on main) - Regenerate agents uv.lock
DotNet Service
Provides decompilation capabilities using the ILSpy decompiler engine as well as deserialization analysis with functionality pulled from InspectAssembly.
Integrates directly with Dapr's pub/sub and SeaweedFS (S3-compatible object storage) to cut down on process creates via Python.
Original ILSpy code was adapted (MIT license).
Original InspectAssembly code is by @matterpreter under a BSD 3-Clause license.
Features
- Listens for decompilation requests via Dapr pub/sub
- Downloads .NET assemblies from SeaweedFS object storage
- Decompiles assemblies using the ILSpy decompiler engine natively
- Compresses output to ZIP files
- Uploads results back to SeaweedFS
- Analyzes the original assembly using InspectAssembly
- Publishes decompilation + analysis results via Dapr pub/sub
Environment Variables
The following environment variables are required:
S3_ENDPOINT- S3-compatible storage endpoint (e.g.,http://seaweedfs:8333)S3_ACCESS_KEY- S3 access keyS3_SECRET_KEY- S3 secret keyS3_BUCKET- S3 bucket name (e.g.,files)