load-code/dotnet

generate method via reflection in .NET

rule:
  meta:
    name: generate method via reflection in .NET
    namespace: load-code/dotnet
    authors:
      - michael.hunhoff@mandiant.com
    description: https://github.com/bohops/DynamicDotNet/blob/main/assembly_loader/DynamicAssemblyLoader.cs
    scopes:
      static: function
      dynamic: call
  features:
    - or:
      - api: System.Reflection.Emit.DynamicMethod::ctor
      - api: System.Reflection.Emit.DynamicMethod::GetILGenerator
      - api: System.Reflection.Emit.ILGenerator::Emit
      - api: System.Reflection.Emit.ILGenerator::EmitCall
      - api: System.Reflection.Emit.ILGenerator::EmitCalli
      - api: System.Reflection.Emit.ILGenerator::EmitWriteLine

last edited: 2023-11-24 10:34:28