This repository contains several AMSI bypasses. These bypasses are based on some very nice research that has been put out by some awesome people. I really recommend checking them out: https://i.blackhat.com/Asia-22/Friday-Materials/AS-22-Korkos-AMSI-and-Bypass.pdf and https://rastamouse.me/memory-patching-amsi-bypass/
☆23Jul 7, 2022Updated 4 years ago
Alternatives and similar repositories for AMSI-Bypasses
Users that are interested in AMSI-Bypasses are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆18Dec 9, 2023Updated 2 years ago
- All things Binary Exploitation, Memory, Assembly and Corruptions.☆10Sep 25, 2020Updated 5 years ago
- Defeating Anti-Debugging Techniques for Malware Analysis☆12Oct 1, 2022Updated 3 years ago
- ☆18Sep 24, 2024Updated last year
- A method to execute shellcode using RegisterWaitForInputIdle API.☆55Apr 4, 2023Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- An adaptation of timwhitez's proxycall that uses kernelbase.dll!Beep.☆16Nov 1, 2023Updated 2 years ago
- This repository contains a list of python scripts to work with Microsoft RPC for research purposes.☆51Jan 31, 2025Updated last year
- ☆39May 20, 2023Updated 3 years ago
- ☆14Mar 28, 2024Updated 2 years ago
- Scanner for CVE-2022-22948 an Information Disclosure in VMWare vCenter☆11May 9, 2023Updated 3 years ago
- Spring Cloud Gateway Actuator API SpEL Code Injection (CVE-2022-22947)☆11Apr 15, 2022Updated 4 years ago
- ☆70Aug 2, 2022Updated 3 years ago
- ☆24Nov 29, 2023Updated 2 years ago
- 🐍 Python Exploit for CVE-2022-23935☆11Feb 10, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A tool capable of bypassing easy root detection mechanisms by patching applications automatically (without frida).☆33Jun 20, 2024Updated 2 years ago
- CVE-2022-32119 - Arox-Unrestricted-File-Upload☆17Dec 20, 2023Updated 2 years ago
- Docker for the latest gophish with stealth configuration from sneaky_gophish☆16Apr 5, 2024Updated 2 years ago
- An insecurely implemented and installed Windows service for emulating elevation of privileges vulnerabilities☆68Aug 25, 2022Updated 3 years ago
- Adds a "poor man's" Undo capability to the Windows companion apps for FFG board games, including Mansions of Madness Second Edition, Desc…☆20Dec 30, 2021Updated 4 years ago
- Bypass Malware Time Delays☆105Sep 23, 2022Updated 3 years ago
- ☆208Feb 24, 2022Updated 4 years ago
- Exploit for CVE-2022-30206☆73Sep 25, 2022Updated 3 years ago
- ☆61Oct 24, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A HTTP bot in Java with basic commands and ability's☆10Aug 20, 2015Updated 10 years ago
- List/Read contents of Zip files (in memory and without extraction) using CobaltStrike's Execute-Assembly☆61May 24, 2022Updated 4 years ago
- POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability.☆17Jun 18, 2025Updated last year
- Retrieve AD accounts description and search for password in it☆81Jul 21, 2022Updated 4 years ago
- This repository provides the core to build your own External C2 Server and Connector for Brute Ratel C4☆58May 8, 2022Updated 4 years ago
- ☆18Jun 25, 2024Updated 2 years ago
- The program uses the Windows API functions to traverse through directories and locate DLL files with RWX section☆113Jul 15, 2023Updated 3 years ago
- Interact with Windows RPC Services over SMB using go-smb☆11Jul 6, 2026Updated 2 weeks ago
- malleable profile generator GUI for Havoc☆55Apr 28, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …☆258Jul 7, 2022Updated 4 years ago
- This repository contains various files linked to Operation Shadowhammer as it was originally discovered by Kaspersky Team.☆12Mar 27, 2019Updated 7 years ago
- A proving grounds for young and aspiring BBOT modules☆15Apr 1, 2026Updated 3 months ago
- Deleting Shadow Copies In Pure C++☆118Oct 31, 2022Updated 3 years ago
- Code that can be used to create/steal/manipulate token contexts in a program. Can be implemented into other C# projects.☆12Jan 3, 2019Updated 7 years ago
- Attack and introduction (info stealer), start your adventure in MMD☆22Sep 14, 2025Updated 10 months ago
- A small CTFd plugin to send notifications about solves and admin announcements to Slack/Discord/Telegram☆14Oct 20, 2021Updated 4 years ago