#

amsi-evasion

Here are 24 public repositories matching this topic...

inceptor

klezVirus / inceptor

Template-Driven AV/EDR Evasion Framework

obfuscation pinvoke code-injection red-team payload-generator av-evasion av-bypass red-teaming process-injection amsi-bypass pe-packer dinvoke amsi-evasion edr-bypass av-edr-bypass

Updated Nov 3, 2023
Assembly

ZeroMemoryEx / Amsi-Killer

Lifetime AMSI bypass

win32 red-team red-teaming amsi-bypass amsi-evasion amsi-patch

Updated Sep 26, 2023
C++

klezVirus / chameleon

PowerShell Script Obfuscator

obfuscation powershell bypass-antivirus amsi-bypass amsi-evasion

Updated Nov 2, 2023
Python

V-i-x-x / AMSI-WRITE-RAID-BYPASS

"AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS

malware vulnerability pentesting pentest av 0day amsi-bypass avbypass amsi-evasion edr-bypass amsi-patch

Updated Sep 30, 2025
PowerShell

JustEvadeBro

sinfulz / JustEvadeBro

JustEvadeBro, a cheat sheet which will aid you through AMSI/AV evasion & bypasses.

anti-virus malware antivirus av evasion bypass amsi amsi-bypass evasions bypasses amsi-evasion

Updated Sep 29, 2026

AMSI-Reaper

h0ru / AMSI-Reaper

windows csharp powershell red-team amsi-bypass amsi-evasion amsi-patch

Updated Sep 12, 2024
C#

safebuffer / LightMe

HTTP Server serving obfuscated Powershell Scripts/Payloads

penetration-testing amsi redteam-infrastructure amsi-evasion

Updated Jul 3, 2021
PowerShell

mochabyte0x / TrampoLatte

A proof of concept AMSI & ETW bypass using trampolines for hooking and modifying execution flow

amsi-bypass amsi-evasion trampoline-hooking etw-evasion etw-bypass

Updated Jun 26, 2025
C

Dovughs / mora-hwbp

Hardware Breakpoint (DR0-DR7) based patch-less user-mode hooking & telemetry instrumentation engine (AMSI, WLDP & ETW PoC).

c in-memory etw veh security-research amsi amsi-bypass amsi-evasion edr-evasion etw-evasion hwbp etw-bypass hwbp-evasion wldp-bypass wldp hardware-breakpoints patchless-hooking

Updated Sep 24, 2026
C

okankurtuluss / AMSIBypassPatch

This PowerShell script applies a memory patch to bypass the Antimalware Scan Interface (AMSI), allowing unrestricted execution of PowerShell commands.

security powershell patch pentest evasion cyber bypass powershell-scripts cyber-security red-team security-tools amsi amsi-bypass amsi-evasion amsi-patch

Updated Jun 2, 2024
PowerShell

Vith0r / Patch-Amsi

Bypassing amsi.dll via memory patch, simple code!

amsi-bypass amsi-evasion amsi-patch

Updated Oct 27, 2024
C++

TartarusLabs / Expeditus

Expeditus is a loader that executes shellcode on a target Windows system. It combines several offensive techniques in order to attempt to do this with some level of stealth.

security penetration-testing dropper code-injection red-team shellcode-loader red-teaming adversary-emulation process-injection shellcode-injection amsi-bypass amsi-evasion

Updated May 30, 2022
C#

bobby-tablez / Invoke-XORfuscation

Generate obfuscated PowerShell commands using XOR logic with random keys!

obfuscation powershell malware-research xor antivirus-evasion amsi-bypass avbypass amsi-evasion antivirus-bypass

Updated Apr 7, 2025
PowerShell

D1se0 / AMSI-Bypass-Generator

Generator of techniques to evade AMSI in Windows. It uses random methods to generate code without signatures detectable by Windows Defender. Ideal for security research and AMSI bypass.

generator code-generator powershell hacking page ethical-hacking page-generator amsi cibersecurity amsi-bypass amsi-evasion page-hacker evasion-techniques

Updated Feb 16, 2025
JavaScript

grisuno / amsi

Amsi bypass in go tested on 10.0.20348.0 Microsoft Windows NT 10.0.20348.0

windows cross-compile redteam amsi amsi-bypass amsi-evasion amsi-patch lazyown

Updated Sep 18, 2026
Go

chainski / Powershell-Cradles

Repo containing PowerShell Download Cradles (oneliners)

powershell payload oneliners shellcode-loader amsiscanbuffer oneliner-commands amsi-bypass amsi-evasion amsi-patch powershell-cradles powershell-droppers

Updated Dec 7, 2022
PowerShell

noderaven / solid-macro

VBA macro chain demonstrating modern EDR-evasion techniques. OSEP-grade study artifact for Windows 11 24H2 + MDE.

microsoft exploit poc vba shellcode syscalls offensive-security red-team offsec microsoft-office red-teaming amsi vba-word shellcode-injection amsi-bypass osep amsi-evasion edr-evasion

Updated Jun 24, 2026
VBA

twelvesec / TRON

Windows Trojan & Reverse-Shell Generator Tool

rust reverse-shell powershell hacking penetration-testing evasion hacking-tool meterpreter ethical-hacking penetration-testing-tools amsi-bypass evasion-attack amsi-evasion defender-bypass evasion-techniques

Updated Sep 26, 2026
Shell

Print3M / amsi-memory-patching

AMSI Bypass by Memory Patching

amsi-bypass amsi-evasion amsi-patch

Updated May 5, 2024
PowerShell

AnandJogawade / RedTeam-PowerShell-AMSI-Bypass

PowerShell AMSI Bypass

powershell antivirus powershell-scipts amsi amsiscanbuffer amsi-bypass avbypass amsi-evasion antivirusbypass amsi-wrapper amsi-patch powershellscripts amsibypass antimalware-scan-interface

Updated Jul 12, 2026
PowerShell

Add this topic to your repo

To associate your repository with the amsi-evasion topic, visit your repo's landing page and select "manage topics."