amsi-bypass · GitHub Topics

Template-Driven AV/EDR Evasion Framework

obfuscation pinvoke dinvoke code-injection process-injection av-bypass amsi-bypass av-evasion edr-bypass pe-packer amsi-evasion red-team red-teaming av-edr-bypass payload-generator

Assembly 1.69 k

2 年前

Sh3lldon / FullBypass

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell.

amsi-bypass powershellclm

C# 754

3 个月前

ZeroMemoryEx / Amsi-Killer

Lifetime AMSI bypass

amsi-bypass amsi-patch red-team win32 amsi-evasion red-teaming

C++ 627

2 年前

klezVirus / chameleon

PowerShell Script Obfuscator

PowerShell obfuscation bypass-antivirus amsi-evasion amsi-bypass

Python 553

2 年前

sinfulz / JustEvadeBro

JustEvadeBro, a cheat sheet which will aid you through AMSI/AV evasion & bypasses.

av antivirus anti-virus Malware evasion amsi-evasion amsi-bypass bypass evasions

308

10 个月前

V-i-x-x / AMSI-WRITE-RAID-BYPASS

"AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS

0day amsi-bypass amsi-evasion amsi-patch av avbypass edr-bypass vulnerability pentest pentesting Malware

PowerShell 284

2 个月前

BlackSnufkin / NyxInvoke

NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-build support

amsi-bypass etw-bypass offensive-security red-team Rust

Rust 214

4 个月前

h0ru / AMSI-Reaper

amsi-bypass amsi-evasion red-team C#PowerShell Windows amsi-patch

C# 103

9 个月前

EvilBytecode / Lifetime-Amsi-EtwPatch

Two in one, patch lifetime powershell console, no more etw and amsi!

amsi-bypass amsi-evasion amsi-patch etw etw-bypass pentesting red-teaming fud

Go 92

2 个月前

Chainski / AES-Encoder

#安全#PowerShell Obfuscator. A PowerShell script anti-virus evasion tool

av-evasion amsi-bypass cobalt-strike crypter ctf-tools Hacking 安全 Cryptography encryption fud penetration-testing red-team PowerShell

PowerShell 73

7 个月前

wabzsy / gonut

Generator of https://github.com/TheWover/donut in pure Go. supports compression, AMSI/WLDP/ETW bypass, etc.

amsi-bypass donut etw-bypass Go Shell pe2shc pe2shellcode

Go 58

2 年前

aress31 / clm-rout

A C# program featuring an all-in-one bypass for CLM, AppLocker and AMSI using Runspace.

amsi-bypass applocker PowerShell offensive-security osep living-off-the-land Windows windows-defender

C# 19

3 年前

okankurtuluss / AMSIBypassPatch

This PowerShell script applies a memory patch to bypass the Antimalware Scan Interface (AMSI), allowing unrestricted execution of PowerShell commands.

amsi-bypass amsi-evasion amsi-patch bypass cyber cyber-security evasion patch pentest PowerShell powershell-scripts red-team 安全

PowerShell 11

1 年前

Vith0r / Patch-Amsi

Bypassing amsi.dll via memory patch, simple code!

amsi-bypass amsi-evasion amsi-patch

C++ 11

8 个月前

TartarusLabs / Expeditus

Expeditus is a loader that executes shellcode on a target Windows system. It combines several offensive techniques in order to attempt to do this with some level of stealth.

adversary-emulation amsi-bypass amsi-evasion code-injection dropper penetration-testing process-injection red-team red-teaming 安全 shellcode-injection shellcode-loader

C# 11

3 年前