rcsi.exe

Non-Interactive command line inerface included with Visual Studio.

AWL Bypass

Local execution of arbitrary C# code stored in local CSX file.

rcsi.exe {PATH:.csx}

Use embedded C# within the csx script to execute the code. — MITRE: T1127 — Privileges: User

Execute

Local execution of arbitrary C# code stored in local CSX file.

rcsi.exe {PATH:.csx}

Use embedded C# within the csx script to execute the code. — MITRE: T1127 — Privileges: User