Gadgets for Mono?

[gsuberland]

Are there any gadgets out there for Mono? I'd be willing to implement them but I can't find any research into attacking deserialization on Mono, or Unity for that matter. Target platform is Windows.

[pwntester]

Im afraid there are no mono gadgets at the moment. They are very welcome :)

[denandz]

Just in case someone stumbles across this issue like I did, the solution is to tweak TypeConfuseDelegate to work with mono (and Unity!). I've detailed the patch here: https://gist.github.com/denandz/aa2b7bd145c95b430cfc0386a9e6ce40

@pwntester - I'll wrap this up into a new gadget and send you through a pull request when I get some spare time

[pwntester]

Awesome, thanks

[gogo2464]

you can close #86

[gogo2464]

Actually no. Your gadget is just not working anymore.

[irsdl]

The gadget had a bug which I am going to fix in the next release to work with the latest version of Mono.

[gogo2464]

@irsdl thanks! did you test it in 2024 please?

[irsdl]

@gogo2464 I haven't tested this gadget in 2024 but it used to work. I don't think they have changed Mono, have they?

[irsdl]

If there is anything wrong with it, please open a new issue with more details.

[gogo2464]

I will test on a real target. it will take a lot of time.