This repository contains several AMSI bypasses. These bypasses are based on some very nice research that has been put out by some awesome people. I really recommend checking them out: https://i.blackhat.com/Asia-22/Friday-Materials/AS-22-Korkos-AMSI-and-Bypass.pdf and https://rastamouse.me/memory-patching-amsi-bypass/
☆22Jul 7, 2022Updated 4 years ago
Alternatives and similar repositories for AMSI-Bypasses
Users that are interested in AMSI-Bypasses are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.☆29Jun 7, 2023Updated 3 years ago
- cobalt strike tools☆32Nov 4, 2021Updated 4 years ago
- All things Binary Exploitation, Memory, Assembly and Corruptions.☆10Sep 25, 2020Updated 6 years ago
- ☆70Aug 2, 2022Updated 4 years ago
- ☆207Feb 24, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- WptsExtensions.dll for exploiting DLL hijacking of the task scheduler.☆57Jun 30, 2021Updated 5 years ago
- ☆43Jul 6, 2022Updated 4 years ago
- Enabled / Disable LSA Protection via BYOVD☆82Dec 8, 2021Updated 4 years ago
- ☆17Oct 21, 2023Updated 3 years ago
- Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files☆32Jun 15, 2022Updated 4 years ago
- Dump Lsass Memory Using a Reflective Dll☆14Feb 4, 2022Updated 4 years ago
- 🐍 Python Exploit for CVE-2022-23935☆11Feb 10, 2023Updated 3 years ago
- Add GoReSym symbols to an x(64|32)dbg debug session, using x64dbg_automate.☆16Apr 17, 2025Updated last year
- Scanner for CVE-2022-22948 an Information Disclosure in VMWare vCenter☆11May 9, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A method to execute shellcode using RegisterWaitForInputIdle API.☆53Apr 4, 2023Updated 3 years ago
- miscellaneous codes☆38Sep 24, 2023Updated 3 years ago
- Click Once + App Domain☆69Feb 23, 2026Updated 8 months ago
- LibreHealth v2.0.0 suffers from an authenticated file upload vulnerability allowing remote attackers to gain remote code execution (RCE) …☆12Jul 19, 2020Updated 6 years ago
- Check for NotProxyShell CVE-2022-40140 & CVE-2022-41082☆26Oct 2, 2022Updated 4 years ago
- A set of tools for collecting forensic information☆28Apr 4, 2020Updated 6 years ago
- Proof of concept for the command injection vulnerability affecting the ZTE MF286R router, including an RCE exploit.☆12Jan 7, 2023Updated 3 years ago
- ☆14Mar 28, 2024Updated 2 years ago
- Spring Cloud Gateway Actuator API SpEL Code Injection (CVE-2022-22947)☆11Apr 15, 2022Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆24Nov 29, 2023Updated 2 years ago
- This repository contains a list of python scripts to work with Microsoft RPC for research purposes.☆50Jan 31, 2025Updated last year
- ☆38May 20, 2023Updated 3 years ago
- An adaptation of timwhitez's proxycall that uses kernelbase.dll!Beep.☆16Nov 1, 2023Updated 2 years ago
- ☆70Oct 30, 2023Updated 3 years ago
- A little implant which SSH's back with a shell☆38Feb 1, 2022Updated 4 years ago
- IOXIDResolver from AirBus Security/PingCastle☆52Nov 25, 2020Updated 5 years ago
- ☆18Dec 9, 2023Updated 2 years ago
- A module for CME that spiders across a domain.☆35Jul 15, 2022Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- C# havoc implant☆99Feb 12, 2023Updated 3 years ago
- CVE-2022-32119 - Arox-Unrestricted-File-Upload☆17Dec 20, 2023Updated 2 years ago
- Yet, Another Packer/Loader☆25Feb 26, 2023Updated 3 years ago
- Elasticsearch Stack Overflow Vulnerability☆17Sep 23, 2023Updated 3 years ago
- ☆94Oct 13, 2022Updated 4 years ago
- this repo is to cover the other undocumented or published / in different langaue to achieve shellcode injection via windows callback func…☆87Jun 24, 2022Updated 4 years ago
- This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …☆258Jul 7, 2022Updated 4 years ago