Alternatives and similar repositories for AMSI-Bypass:

Users that are interested in AMSI-Bypass are comparing it to the libraries listed below

• airzero24 / WMIReg
  PoC to interact with local/remote registry hives through WMI
  ☆83Updated 4 years ago
• N4kedTurtle / HellsGatePoC
  ☆50Updated 4 years ago
• gitjdm / dumper2020
  Yet another LSASS dumper
  ☆76Updated 4 years ago
• WingsOfDoom / ICU
  quick 'n dirty poc based on PoC windows auth prompt in c# based on https://gist.githubusercontent.com/mayuki/339952/raw/2c36b735bc51861a3…
  ☆31Updated 4 years ago
• mdsecactivebreach / Execute-GithubAssembly-Aggressor
  Aggressor Script to Execute Assemblies from Github
  ☆66Updated 4 years ago
• 0xB455 / AmsiBypass
  C# PoC implementation for bypassing AMSI via in memory patching
  ☆65Updated 4 years ago
• dev-2null / KerberosRun
  A little tool to play with Kerberos.
  ☆66Updated last year
• leoloobeek / COMRunner
  A simple COM server which provides a component to run shellcode
  ☆132Updated 4 years ago
• xpn / AppProxyC2
  ☆66Updated 3 years ago
• FalconForceTeam / SysWhispers2BOF
  Script to use SysWhispers2 direct system calls from Cobalt Strike BOFs
  ☆117Updated 2 years ago
• aaaddress1 / xlsKami
  Out-of-the-Box Tool to Obfuscate Excel XLS. Include Obfuscation & Hide for Cell Labels & BoundSheets
  ☆47Updated 3 years ago
• mitchmoser / SharPermission
  C# .NET Assembly for interacting with File Object DACLs
  ☆40Updated 4 years ago
• Aetsu / SLib
  SLib is a sandbox evasion library that implements some of the checks from https://evasions.checkpoint.com in C#
  ☆63Updated last year
• n4ll3ec / AggressorSploit
  Collect & Optimize awesome CobaltStrike aggressor scripts, hope to create a All-In-One framework.
  ☆37Updated 4 years ago
• N4kedTurtle / ExecuteAssembly_Mailslot
  ☆35Updated 4 years ago
• NotMedic / ArtifactKit
  ☆60Updated 3 years ago
• mez-0 / MoveScheduler
  .NET 4.0 Scheduled Job Lateral Movement
  ☆88Updated 4 years ago
• jsecu / CredManBOF
  ☆91Updated 3 years ago
• slyd0g / SK8RAT
  C++ implant that interfaces with a SK8PARK server
  ☆47Updated 3 years ago
• boku7 / xPipe
  Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions
  ☆75Updated last year
• djhohnstein / CSharpSetThreadContext
  C# Shellcode Runner to execute shellcode via CreateRemoteThread and SetThreadContext to evade Get-InjectedThread
  ☆118Updated 5 years ago
• RiccardoAncarani / TaskShell
  ☆56Updated 3 years ago
• slyd0g / SharpCrashEventLog
  C# port of LogServiceCrash
  ☆45Updated 4 years ago
• vletoux / RPCForSMBLibrary
  Extension of SMBLibrary for RPC calls
  ☆33Updated 7 months ago
• rasta-mouse / Fork-n-Run
  ☆69Updated 3 years ago
• rmdavy / HeapsOfFun
  AMSI Bypass Via the Heap
  ☆105Updated 4 years ago