What payloads can be delivered using DotNetToJScript besides the example assembly?
DotNetToJScript can deliver shellcode, Mimikatz, and PowerShell scripts. For shellcode, compile a C# console app that injects shellcode and generate a script with `DotNetToJScript.exe -o shellcode.js shellcode.exe`. For Mimikatz, use C# code like the gist linked in the article. PowerShell payloads can be loaded via StarFighters, as described in [Loading .Net Programs Using JS](/news/loading-net-programs-using-js). These in-memory payloads avoid disk writes, similar to [Implementation of In-Memory Loading for Seatbelt](/news/implementation-of-in-memory-loading-for-seatbelt).
Related article:
Loading .Net Programs Using JS