Ares-mythic/documentation-payload/ares/commands/assembly_inject.md at b88b3a218456c39e6473c906213df5b3d2b565c1

mirror of https://github.com/Aryma-f4/Ares-mythic.git synced 2026-06-13 05:14:11 +00:00

Files

Aryma 03d283cf49 refactor(payload): rename apollo to ares and update documentation

This commit renames the Apollo payload type to Ares, moving all associated files and updating documentation accordingly. The change includes:
- Renaming directories from `apollo` to `ares`
- Updating documentation image references
- Maintaining the same code functionality while changing the payload name
- Adding new Ares-specific documentation files
- Removing old Apollo documentation files

The rename is done to reflect the new payload name while preserving all existing functionality.

2026-04-14 14:02:44 +07:00

861 B

Raw Blame History

+++ title = "assembly_inject" chapter = false weight = 103 hidden = false +++

{{% notice info %}} Artifacts Generated: Process Inject {{% /notice %}}

Summary

Inject the .NET assembly loader into a remote process and execute an assembly registered with register_file. This assembly is injected into the remote process using the injection technique currently specified by get_injection_techniques.

Arguments

Any arguments to be executed with the assembly.

Assembly

Name used when registering assembly with the register_file command (e.g., Seatbelt.exe)

PID

Process ID to inject into.

Usage

assembly_inject -PID 7344 -Assembly Seatbelt.exe -Arguments DotNet

Example

MITRE ATT&CK Mapping

T1055

861 B Raw Blame History