LOLBAS. GitHub
LIVING OFF THE LAND / OTHER MICROSOFT BINARIES

csi.exe

View source

Command line interface included with Visual Studio.

Execute
01COMMAND EXAMPLES
01ATT&CK TECHNIQUES
05DETECTION RESOURCES
01CAPABILITIES
01 / TRADECRAFT

Command reference

1 examples

Execute1

EXAMPLE 01T1127

Use csi.exe to run unsigned C# code.

COMMAND
csi.exe {PATH:.cs}
USE CASE
Local execution of unsigned C# code.
PRIVILEGES
User
OPERATING SYSTEM
Windows
Execute · CSharp
02 / ON DISK

Known paths

c:\Program Files (x86)\Microsoft Visual Studio\2017\Community\MSBuild\15.0\Bin\Roslyn\csi.exe
c:\Program Files (x86)\Microsoft Web Tools\Packages\Microsoft.Net.Compilers.X.Y.Z\tools\csi.exe
03 / DEFENSIVE INTELLIGENCE

Detection & indicators

5 resources
FURTHER READING

Research & resources

COMMUNITY RESEARCH

Acknowledgements

Casey Smith@subtee