0r13lc0ch4v1 / HideFromAMSI
Bypass AMSI and Executing PowerShell scripts from C# - using CyberArk's method to bypass AMSI
☆29Updated 4 years ago
Related projects ⓘ
Alternatives and complementary repositories for HideFromAMSI
- A repo to hold any bypasses I work on/study/whatever☆18Updated 3 years ago
- ☆54Updated 6 years ago
- ☆36Updated 5 years ago
- Files for http://deniable.org/windows/windows-callbacks☆24Updated 4 years ago
- Windows Shellcode Testing Utility to Run Shellcode From A File☆11Updated 4 years ago
- A VBA implementation of the RunPE technique or how to bypass application whitelisting.☆13Updated 5 years ago
- Encrypted Shellcode Loader Generator☆22Updated 5 years ago
- CobaltStrike Aggressor Script to utilise FuzzySec's Windows Notification Framework Research to Spawn a Shell under Explorer.exe☆15Updated 5 years ago
- ☆18Updated 3 years ago
- Code that can be used to create/steal/manipulate token contexts in a program. Can be implemented into other C# projects.☆13Updated 5 years ago
- Example of async client/server sockets in .NET 5☆15Updated 3 years ago
- Proof of concept of VMSA-2017-0012☆41Updated 7 years ago
- C# DCOM Execution☆18Updated 5 years ago
- IIS Handler for *.ps1 files☆9Updated 4 years ago
- Loads shellcode from a resource file.☆21Updated 5 years ago
- Execute shellcode with syscalls from C# .dll☆12Updated 4 years ago
- SharpDir is a simple code set to search both local and remote file systems for files and is compatible with Cobalt Strike.☆26Updated 5 years ago
- C# Implementation of Get-VaultCredential☆13Updated 6 years ago
- Cobalt Strike Malleable Profile Inline Patch Template: A Position Independent Code (PIC) Code Template For Creating Shellcode That Can Be…☆37Updated 4 years ago
- Disable PPL via custom driver and dump lsass☆13Updated 3 years ago
- This tool is designed to simplify and automate the extraction and organization of useful data from Cobalt Strike logs.☆17Updated 5 years ago