S3cur3Th1sSh1t / Amsi-Bypass-Powershell
This repo contains some Amsi Bypass methods i found on different Blog Posts.
☆1,786Updated last month
Alternatives and similar repositories for Amsi-Bypass-Powershell:
Users that are interested in Amsi-Bypass-Powershell are comparing it to the libraries listed below
- The Hunt for Malicious Strings☆1,137Updated 2 years ago
- Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.☆1,101Updated 7 months ago
- ☆1,547Updated 7 months ago
- Extract credentials from lsass remotely☆2,079Updated 2 weeks ago
- Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure …☆2,351Updated last week
- A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.☆1,192Updated last year
- SharpUp is a C# port of various PowerUp functionality.☆1,296Updated 11 months ago
- Abusing impersonation privileges through the "Printer Bug"☆1,910Updated 4 years ago
- Compiled Binaries for Ghostpack☆1,232Updated 2 months ago
- A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.☆1,857Updated 3 weeks ago
- Hide your Powershell script in plain sight. Bypass all Powershell security features☆1,126Updated 5 years ago
- Windows Local Privilege Escalation from Service Account to System☆725Updated 4 years ago
- ☆1,433Updated last year
- Some notes and examples for cobalt strike's functionality☆995Updated 2 years ago
- The swiss army knife of LSASS dumping☆1,840Updated 4 months ago
- Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.☆2,032Updated last year
- Some usefull Scripts and Executables for Pentest & Forensics☆1,102Updated last month
- Windows AV Evasion☆752Updated 4 years ago
- Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019☆1,653Updated 4 months ago
- Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities☆1,563Updated 4 years ago
- ScareCrow - Payload creation framework designed around EDR bypass.☆2,768Updated last year
- Fileless lateral movement tool that relies on ChangeServiceConfigA to run command☆1,439Updated last year
- ConPtyShell - Fully Interactive Reverse Shell for Windows☆1,048Updated last year
- Identifies the bytes that Microsoft Defender flags on.☆2,371Updated last year
- A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)☆1,047Updated 7 months ago
- Active Directory certificate abuse.☆1,565Updated 5 months ago
- PowerShell MachineAccountQuota and DNS exploit tools☆1,265Updated 2 years ago
- Privilege Escalation Enumeration Script for Windows☆3,062Updated last month
- LSASS memory dumper using direct system calls and API unhooking.☆1,501Updated 4 years ago
- ☆2,036Updated last year