Tomiwa-Ot / py-amsi
Scan strings or files for malware using the Windows Antimalware Scan Interface
☆29Updated last year
Alternatives and similar repositories for py-amsi:
Users that are interested in py-amsi are comparing it to the libraries listed below
- Enumerate SSN (System Service Numbers or Syscall ID) and syscall instruction address in ntdll module by parsing the PEB of the current pr…☆19Updated 11 months ago
- ☆26Updated last year
- A lightweight HTTP/HTTPS reverse proxy for efficient, policy-based traffic filtering and redirection.☆40Updated last year
- A simple rpc2socks alternative in pure Go.☆26Updated 6 months ago
- freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package☆34Updated last year
- ECC Public Key Cryptography☆36Updated last year
- exfiltration/infiltration toolkit☆23Updated last year
- Docker container for running CobaltStrike 4.10☆35Updated 4 months ago
- Extension functionality for the NightHawk operator client☆26Updated last year
- A pure C version of SymProcAddress☆24Updated 10 months ago
- Mythic C2 wrapper for NimSyscallPacker☆22Updated last month
- Experience the power of a PHP webshell designed to overcome the limitations of blacklisted system/exec functions.☆23Updated 6 months ago
- ☆45Updated 2 months ago
- ShadowForge Command & Control - Harnessing the power of Zoom's API, control a compromised Windows Machine from your Zoom Chats.☆44Updated last year
- ☆34Updated last year
- Beacon Object Files used for Cobalt Strike☆17Updated last year
- POC for CVE-2024-3183 (FreeIPA Rosting)☆18Updated 4 months ago
- ☆46Updated last year
- Cobalt Strike BOFS☆16Updated last year
- Demonstration of Early Bird APC Injection - MITRE ID T1055.004☆30Updated last year
- MacroExploit use in excel sheet☆20Updated last year
- .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit i…☆41Updated 5 months ago
- Our Tips&Tricks☆39Updated this week
- Just another Process Injection using Process Hollowing technique.☆16Updated last year
- Yet, Another Packer/Loader☆25Updated last year
- Proof of Concept Exploit for CVE-2024-9465☆27Updated 3 months ago
- A remote unauthenticated DOS POC exploit that targets the authentication implementation of Havoc.☆32Updated last year
- in-process powershell runner for BRC4☆45Updated last year
- DFSCoerce exe revisited version with custom authentication☆38Updated last year