Bypass AMSI and Executing PowerShell scripts from C# - using CyberArk's method to bypass AMSI
☆30Feb 22, 2020Updated 6 years ago
Alternatives and similar repositories for HideFromAMSI
Users that are interested in HideFromAMSI are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆13Apr 23, 2019Updated 7 years ago
- A repo to hold any bypasses I work on/study/whatever☆20Dec 30, 2020Updated 5 years ago
- C# loader for msfvenom shellcode with AMSI bypass☆35Jun 13, 2020Updated 6 years ago
- Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().☆216Mar 5, 2020Updated 6 years ago
- ☆13Sep 22, 2019Updated 7 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆75Jul 30, 2024Updated 2 years ago
- Simple remote administration tool. Written in c++ and MASM.☆18May 16, 2018Updated 8 years ago
- C# DCOM Execution☆17Aug 4, 2019Updated 7 years ago
- Extracts all base64 ticket data from a rubeus /dump file and converts the tickets to ccache files for easy use with other tools.☆67Oct 3, 2020Updated 6 years ago
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆16Sep 29, 2018Updated 8 years ago
- ☆16Jul 3, 2020Updated 6 years ago
- Reflectively load PE☆104Aug 4, 2020Updated 6 years ago
- A .NET tool that uses AppDomain's to enable dynamic execution and escape detection.☆29Nov 25, 2019Updated 6 years ago
- Ansible role to install Cobalt Strike and optionally configure as Teamserver☆33Mar 17, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Bypass AMSI and Defender using Ordinal Values☆42Apr 15, 2020Updated 6 years ago
- SharpAddDomainMachine☆69Oct 12, 2021Updated 5 years ago
- Small POC written in C# that performs shellcode injection on x64 processes using direct syscalls as a way to bypass user-land EDR hooks.☆83Dec 20, 2019Updated 6 years ago
- ** DISCONTINUED ** C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + …☆222Dec 8, 2022Updated 3 years ago
- RunPE using Hell's Gate technique.☆31Dec 4, 2020Updated 5 years ago
- My musings with C#☆28Dec 23, 2022Updated 3 years ago
- Phantom DLL Hollowing method implemented in modmap☆18Jun 9, 2021Updated 5 years ago
- C# Implementation of Get-VaultCredential☆14Jul 31, 2018Updated 8 years ago
- A managed .NET Jit hooking library.☆16Dec 3, 2019Updated 6 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- DInvisibleRegistry☆82Nov 20, 2020Updated 5 years ago
- A simplified version of DotNetToJScript to create a JScript file which loads a .NET v2 assembly from memory.☆47Mar 1, 2021Updated 5 years ago
- Reflective DLL loading of your favorite Golang program☆173Jan 27, 2020Updated 6 years ago
- Loads .NET Assembly Via CLR Loader☆17Mar 6, 2019Updated 7 years ago
- ☆54Apr 27, 2019Updated 7 years ago
- .Net Assembly to block ETW telemetry in current process☆78May 14, 2020Updated 6 years ago
- Read the contents of MS Word Documents using Cobalt Strike's Execute-Assembly☆117Sep 30, 2024Updated 2 years ago
- PoC to demonstrate how CLR ETW events can be tampered.☆188Mar 26, 2020Updated 6 years ago
- Simple packer for arbitrary data using only .NET API calls. Produces a unique signature with every usage. Standalone program and library.…☆93Apr 27, 2019Updated 7 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Initial Commit of Coresploit☆57Oct 12, 2021Updated 5 years ago
- Run shellcode from resource☆255Dec 13, 2020Updated 5 years ago
- My CobaltStrike BOFS☆166Jul 23, 2022Updated 4 years ago
- ☆35Apr 5, 2017Updated 9 years ago
- C# Shellcode Runner to execute shellcode via CreateRemoteThread and SetThreadContext to evade Get-InjectedThread☆119Apr 9, 2019Updated 7 years ago
- Windows SSPI wrapper in prue python☆15Nov 29, 2023Updated 2 years ago
- Automation Capable Multi Search 64 Bit Windows Memory Scanner☆28Apr 7, 2021Updated 5 years ago