ByteHide Monitor — .NET Server Agent

Zero-code runtime protection (RASP) for .NET applications. Install once on any server — all .NET apps are automatically protected.

Quick Install (no SDK required)

Linux / macOS:

curl -sSL https://raw.githubusercontent.com/bytehide/monitor-dotnet-agent/main/install.sh | bash -s -- --token <your-token>

Windows (PowerShell as Administrator):

irm https://raw.githubusercontent.com/bytehide/monitor-dotnet-agent/main/install.ps1 | iex

Or with token inline:

& ([scriptblock]::Create((irm https://raw.githubusercontent.com/bytehide/monitor-dotnet-agent/main/install.ps1))) -Token "bh_xxxxxxxxxxxx"

Alternative: dotnet tool

If you have the .NET SDK installed:

dotnet tool install -g Bytehide.Monitor.AgentCli
bytehide-agent install --token <your-token>

How it works

The agent uses two .NET mechanisms to inject protection without code changes:

1. DOTNET_STARTUP_HOOKS — Loads the agent DLL before Main() in every .NET process
2. ASPNETCORE_HOSTINGSTARTUPASSEMBLIES — Registers middleware for ASP.NET Core apps (WAF, request inspection)

What gets installed

Path	Description
/opt/bytehide/agent/ (Linux)	Agent DLLs
C:\Program Files\ByteHide\Agent\ (Windows)	Agent DLLs
/usr/local/share/bytehide/agent/ (macOS)	Agent DLLs
Environment variables	DOTNET_STARTUP_HOOKS, ASPNETCORE_HOSTINGSTARTUPASSEMBLIES, BYTEHIDE_MONITOR_TOKEN

Commands

bytehide-agent install --token <token>   # Install and configure
bytehide-agent status                     # Check agent status
bytehide-agent config set token <token>   # Update token
bytehide-agent config show                # Show configuration
bytehide-agent logs --follow              # View agent logs
bytehide-agent uninstall                  # Remove agent

Docker / Containers

# Install agent (no SDK needed in runtime image)
RUN apt-get update && apt-get install -y curl ca-certificates && rm -rf /var/lib/apt/lists/* \
    && curl -sSL https://raw.githubusercontent.com/bytehide/monitor-dotnet-agent/main/install.sh | bash -s -- --token $BYTEHIDE_TOKEN

# Docker doesn't load /etc/profile.d/, so source the env vars
ENTRYPOINT ["/bin/bash", "-c", "source /etc/profile.d/bytehide-agent.sh && exec dotnet myapp.dll"]

Compatibility

• .NET 6, 7, 8, 9+ — Any .NET Core application
• Linux x64, ARM64, Alpine (musl)
• macOS x64, Apple Silicon
• Windows x64

Links

• ByteHide Monitor
• Documentation
• Get your token