amsi-evasion 开源项目推荐（22 个）

klezVirus /inceptor

Template-Driven AV/EDR Evasion Framework

ZeroMemoryEx /Amsi-Killer

Lifetime AMSI bypass

klezVirus /chameleon

PowerShell Script Obfuscator

V-i-x-x /AMSI-WRITE-RAID-BYPASS

"AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS

sinfulz /JustEvadeBro

JustEvadeBro, a cheat sheet which will aid you through AMSI/AV evasion & bypasses.

h0ru /AMSI-Reaper

该项目在 GitHub 上没有填写描述

safebuffer /LightMe

HTTP Server serving obfuscated Powershell Scripts/Payloads

Dovughs /mora-hwbp

Hardware Breakpoint (DR0-DR7) based patch-less user-mode hooking & telemetry instrumentation engine (AMSI, WLDP & ETW PoC).

mochabyte0x /TrampoLatte

A proof of concept AMSI & ETW bypass using trampolines for hooking and modifying execution flow

okankurtuluss /AMSIBypassPatch

This PowerShell script applies a memory patch to bypass the Antimalware Scan Interface (AMSI), allowing unrestricted execution of PowerShell commands.

Vith0r /Patch-Amsi

Bypassing amsi.dll via memory patch, simple code!

TartarusLabs /Expeditus

Expeditus is a loader that executes shellcode on a target Windows system. It combines several offensive techniques in order to attempt to do this with some level of stealth.

bobby-tablez /Invoke-XORfuscation

Generate obfuscated PowerShell commands using XOR logic with random keys!

D1se0 /AMSI-Bypass-Generator

Generator of techniques to evade AMSI in Windows. It uses random methods to generate code without signatures detectable by Windows Defender. Ideal for security research and AMSI bypass.

twelvesec /TRON

Windows Trojan & Reverse-Shell Generator Tool

grisuno /amsi

Amsi bypass in go tested on 10.0.20348.0 Microsoft Windows NT 10.0.20348.0

chainski /Powershell-Cradles

Repo containing PowerShell Download Cradles (oneliners)

noderaven /solid-macro

VBA macro chain demonstrating modern EDR-evasion techniques. OSEP-grade study artifact for Windows 11 24H2 + MDE.

AnandJogawade /RedTeam-PowerShell-AMSI-Bypass

PowerShell AMSI Bypass

Print3M /amsi-memory-patching

AMSI Bypass by Memory Patching