amsi-evasion
Here are 20 public repositories matching this topic...
Language:All
Sort:Most stars
Template-Driven AV/EDR Evasion Framework
- Updated
Nov 3, 2023 - Assembly
Lifetime AMSI bypass
- Updated
Sep 26, 2023 - C++
PowerShell Script Obfuscator
- Updated
Nov 2, 2023 - Python
JustEvadeBro, a cheat sheet which will aid you through AMSI/AV evasion & bypasses.
- Updated
Aug 21, 2024
"AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS
- Updated
Mar 18, 2025 - PowerShell
- Updated
Sep 12, 2024 - C#
HTTP Server serving obfuscated Powershell Scripts/Payloads
- Updated
Jul 3, 2021 - PowerShell
Two in one, patch lifetime powershell console, no more etw and amsi!
- Updated
Jun 27, 2024 - Go
Lime Crypter Obfuscator Mod
- Updated
Jun 30, 2024 - C#
Expeditus is a loader that executes shellcode on a target Windows system. It combines several offensive techniques in order to attempt to do this with some level of stealth.
- Updated
May 30, 2022 - C#
This PowerShell script applies a memory patch to bypass the Antimalware Scan Interface (AMSI), allowing unrestricted execution of PowerShell commands.
- Updated
Jun 2, 2024 - PowerShell
AMSI ScanBuffer Patch with API Hook poc
- Updated
Feb 9, 2022 - C++
Generate obfuscated PowerShell commands using XOR logic with random keys!
- Updated
Feb 8, 2024 - PowerShell
Loads a C# binary in memory within powershell profile, patching AMSI + ETW.
- Updated
Jun 27, 2024 - Nim
Repo containing PowerShell Download Cradles (oneliners)
- Updated
Dec 7, 2022 - PowerShell
Generator of techniques to evade AMSI in Windows. It uses random methods to generate code without signatures detectable by Windows Defender. Ideal for security research and AMSI bypass.
- Updated
Feb 16, 2025 - JavaScript
Patching AmsiOpenSession by forcing an error branching.
- Updated
Jul 20, 2023 - C++
VB macro for Word exploit
- Updated
Jan 28, 2025 - VBA
Improve this page
Add a description, image, and links to theamsi-evasion topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with theamsi-evasion topic, visit your repo's landing page and select "manage topics."