Msbuild.exe

Used to compile and execute code

AWL Bypass

Compile and run code

msbuild.exe {PATH:.xml}

Build and execute a C# project stored in the target XML file. — MITRE: T1127.001 — Privileges: User

Execute

Compile and run code

msbuild.exe {PATH:.csproj}

Build and execute a C# project stored in the target csproj file. — MITRE: T1127.001 — Privileges: User

Execute DLL

msbuild.exe /logger:TargetLogger,{PATH_ABSOLUTE:.dll};MyParameters,Foo

Executes generated Logger DLL file with TargetLogger export. — MITRE: T1127.001 — Privileges: User

Execute project file that contains XslTransformation tag parameters

msbuild.exe {PATH:.proj}

Execute JScript/VBScript code through XML/XSL Transformation. Requires Visual Studio MSBuild v14.0+. — MITRE: T1127.001 — Privileges: User

Bypass command-line based detections

msbuild.exe @{PATH:.rsp}

By putting any valid msbuild.exe command-line options in an RSP file and calling it as above will interpret the options as if they were passed on the command line. — MITRE: T1036 — Privileges: User