synacktiv/AMSI-Bypass external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

synacktiv/AMSI-Bypass

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/synacktiv/AMSI-Bypass)

Close

synacktiv / AMSI-BypassView on GitHubMore

• External links
• Readme badge

Lists of AMSI triggers (VBA, JScript / VBScript)

☆33Jun 28, 2019Updated 6 years ago

Alternatives and similar repositories for AMSI-Bypass

Users that are interested in AMSI-Bypass are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• snovvcrash / BOFs

  View on GitHub
  Beacon Object Files (not Buffer Overflows)
  ☆58Mar 6, 2023Updated 3 years ago
• hausec / Set-RBCDBytes

  View on GitHub
  ☆18Nov 24, 2020Updated 5 years ago
• upils / redirect-lib

  View on GitHub
  Library of traffic redirectors
  ☆26Apr 7, 2020Updated 5 years ago
• obscuritylabs / HastySeries

  View on GitHub
  ObscurityLabs RedTeam C# Toolkit
  ☆122Sep 3, 2019Updated 6 years ago
• jnqpblc / Randomness

  View on GitHub
  Snippets of scripting randomness
  ☆13Jun 9, 2022Updated 3 years ago
• leoloobeek / keyring

  View on GitHub
  Proper Payload Protection Prevents Poor Performance
  ☆76Jul 27, 2022Updated 3 years ago
• DoktorCranium / Linux-Meterpreter-tests

  View on GitHub
  Linux AV tests
  ☆13Apr 23, 2019Updated 6 years ago
• Velocidex / go-prefetch

  View on GitHub
  A golang implementation of a prefetch parser.
  ☆20Oct 27, 2025Updated 4 months ago
• timwhitez / Doge-AliveCheck

  View on GitHub
  Use ICMP requests to check the alive subnet.
  ☆23Jul 26, 2021Updated 4 years ago
• Lucky0x0D / NetScalerEPABypass

  View on GitHub
  A quick and dirty way to bypass encrypted EPA to connect to a NetScaler Gateway
  ☆20Oct 11, 2019Updated 6 years ago
• florylsk / AmsiBypass123

  View on GitHub
  ☆13Feb 25, 2023Updated 3 years ago
• alphaSeclab / bypass-uac

  View on GitHub
  ☆58Aug 31, 2018Updated 7 years ago
• 0x00Jeff / NT-SYSTEM

  View on GitHub
  Tool to get NT system shell .
  ☆24Jul 12, 2021Updated 4 years ago
• qsecure-labs / Sp00fer

  View on GitHub
  Sp00fer blog post -
  ☆24Jul 19, 2022Updated 3 years ago
• leoloobeek / GoGreen

  View on GitHub
  Environmental (and http) keying for scripting languages
  ☆39Oct 5, 2018Updated 7 years ago
• darrenmartyn / sophucked

  View on GitHub
  CVE-2020-25223
  ☆11Sep 13, 2021Updated 4 years ago
• YuriMB / WinSCP-Password-Recovery

  View on GitHub
  Decrypt stored WinSCP Passwords.
  ☆24May 4, 2015Updated 10 years ago
• Allevon412 / ClassicAPIUnhooking

  View on GitHub
  ☆16Nov 23, 2021Updated 4 years ago
• igaspard / ANPR

  View on GitHub
  Automatic Number Plate Recognition project
  ☆11Mar 28, 2013Updated 12 years ago
• b4rtik / SharpMiniDump

  View on GitHub
  Create a minidump of the LSASS process from memory
  ☆261Nov 2, 2022Updated 3 years ago
• rasta-mouse / Aggressor-Script

  View on GitHub
  Collection of Aggressor Scripts for Cobalt Strike
  ☆172Aug 8, 2018Updated 7 years ago
• hktalent / vscan

  View on GitHub
  分支出了些问题，无法合并到main，迁移至https://github.com/hktalent/scan4all
  ☆17Dec 18, 2023Updated 2 years ago
• fox-it / signed-phishing-email

  View on GitHub
  ☆11Dec 18, 2018Updated 7 years ago
• eversinc33 / Godmode

  View on GitHub
  Tool for playing with Windows Access Token manipulation.
  ☆82Nov 28, 2022Updated 3 years ago
• shakreiner / windbg-scripts

  View on GitHub
  ☆11Apr 24, 2020Updated 5 years ago
• xx0hcd / Alt-Beacon-Payload

  View on GitHub
  Beacon payload using AV bypass method from https://github.com/fullmetalcache/CsharpMMNiceness and shellcode generated from https://github…
  ☆20Feb 9, 2021Updated 5 years ago
• OmerYa / ROP-From-Zero-to-Nation-State-In-25-Minutes

  View on GitHub
  Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)
  ☆16Sep 4, 2020Updated 5 years ago
• iDigitalFlame / InYourMems

  View on GitHub
  Windows Antivirus Evasion and Memory Injection
  ☆12Feb 19, 2022Updated 4 years ago
• knavesec / BloodHound-Custom-Queries

  View on GitHub
  Assorted BloodHound Cypher queries/tricks I haven't seen in other cheat sheets
  ☆12Jun 21, 2021Updated 4 years ago
• Coalfire-Research / autorelayx

  View on GitHub
  Automatically perform advanced NTLM hash relay attacks
  ☆15Nov 4, 2022Updated 3 years ago
• horizon3ai / Ivanti-EPM-Coercion-Vulnerabilities

  View on GitHub
  Proof of concept exploit for Ivanti EPM CVE-2024-13159 and others
  ☆13Feb 19, 2025Updated last year
• CompassSecurity / impacket

  View on GitHub
  Impacket is a collection of Python classes for working with network protocols.
  ☆17Feb 3, 2026Updated last month
• skahwah / SSHClient

  View on GitHub
  A C# SSH client
  ☆74Jan 29, 2024Updated 2 years ago
• m01e-40x / rmi-attack-demo

  View on GitHub
  在学习Java反序列化漏洞的过程中，用来理解Java RMI程序的执行流程，演示如何攻击Java RMI程序的几个示例。
  ☆11May 6, 2020Updated 5 years ago
• harleyQu1nn / csfm

  View on GitHub
  Cobalt Strike Field Manual - A quick reference for Windows commands that can be accessed in a beacon console.
  ☆46Nov 22, 2017Updated 8 years ago
• two06 / SharpStick

  View on GitHub
  ☆18Jul 3, 2020Updated 5 years ago
• Kr0ff / Kentico-12-RCE-via-SyncServer

  View on GitHub
  Kentico <=12.0.14 is vulnerable to a remote code execution via the SyncServer
  ☆10Sep 28, 2020Updated 5 years ago
• HackingThings / SuperSneakyExec

  View on GitHub
  Loading and executing shellcode in C# without PInvoke.
  ☆22Jan 10, 2022Updated 4 years ago
• a7t0fwa7 / Attacker_Infrastructure_Setup

  View on GitHub
  ☆12Apr 5, 2025Updated 11 months ago