mirror of
https://github.com/SpecterOps/Nemesis
synced 2026-06-08 12:36:42 +00:00
DotNet Service
Provides decompilation capabilities using the ILSpy decompiler engine as well as deserialization analysis with functionality pulled from InspectAssembly.
Integrates directly with Dapr's pub/sub and Minio to cut down on process creates via Python.
Original ILSpy code was adapted (MIT license).
Original InspectAssembly code is by @matterpreter under a BSD 3-Clause license.
Features
- Listens for decompilation requests via Dapr pub/sub
- Downloads .NET assemblies from Minio object storage
- Decompiles assemblies using the ILSpy decompiler engine natively
- Compresses output to ZIP files
- Uploads results back to Minio
- Analyzes the original assembly using InspectAssembly
- Publishes decompilation + analysis results via Dapr pub/sub
Environment Variables
The following environment variables are required:
MINIO_ENDPOINT- Minio server endpoint (e.g.,http://minio:9000)MINIO_ACCESS_KEY- Minio access keyMINIO_SECRET_KEY- Minio secret keyMINIO_BUCKET- Minio bucket name (e.g.,files)