What payloads can be delivered using DotNetToJScript besides the example assembly?
DotNetToJScript can deliver shellcode, Mimikatz, and PowerShell scripts. For shellcode, compile a C# console app that injects shellcode and generate a script with `DotNetToJScript.exe -o shellcode.js shellcode.exe`. For Mimikatz, use C# code like the gist linked in the article. PowerShell payloads can be loaded via StarFighters, as described in Loading .Net Programs Using JS. These in-memory payloads avoid disk writes, similar to Implementation of In-Memory Loading for Seatbelt.
shellcodeMimikatzPowerShell payloadStarFightersin-memoryC# shellcode