injectAmsiBypass
by boku7
Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.
AI summary
AMSIBypass Tool
A tool that bypasses AMSI in a remote process with code injection.
- stars
- 377
- forks
- 68
- watching
- 12
Similar projects
Found by comparing what the projects do, not just their names.
ETW bypass tool
Tool to bypass ETW (Event Tracing for Windows) security measure in remote processes by injecting a custom syscall
Shellcode injector
A tool that enables remote process shellcode execution using the Early Bird injection technique
System info BOF
A Cobalt Strike Beacon Object File (BOF) that uses custom syscaller code to make direct system calls to retrieve process information on the target system.
Screenshot tool
A tool designed to capture screenshots without injection on Windows systems using a Buffer Overflow (BOF) technique, intended for use in the context of Cobalt Strike.
Process injector
A tool for injecting malicious code into processes using native APIs and memory section mapping.
Intrusion tool
An aggressor script that allows Cobalt Strike to perform process injection and persistence by leveraging direct syscalls to bypass EDR/AV systems.
Process spawner
A Cobalt Strike Beacon tool that spawns a sacrificial process to execute shellcode, using techniques like Arbitrary Code Guard and PPID spoofing to evade detection.
BOF tool
A Cobalt Strike BOF that exploits a vulnerability to add an admin user
AV bypass tool
A tool for creating shellcode bypasses of antivirus software
Memory injector
A tool for injecting malware into processes by mapping it to memory without registering it with the kernel.
Payload loader
Loads and executes a malicious payload in a Windows system using PowerShell.
UAC Bypass Tool
Tools and techniques to bypass Windows UAC restrictions on executable files by utilizing DCOM objects
BOF executable generator
A Beacon Object File Visual Studio template project for creating malicious code executables
Beacon masking
A proof-of-concept project demonstrating how to mask Beacon's payload execution in Cobalt Strike while executing a user-provided BOF.
ASR scanner
Tools to detect and exploit vulnerabilities in Windows Attack Surface Reduction (ASR) settings
