tomcarver16 / AmsiHook

AmsiHook is a project I created to figure out a bypass to AMSI via function hooking.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

AmsiHook

AmsiHook is a DLL that when injected to a process containing AMSI logging, will hook the AMSI functions and allow them to execute with dummy parameters.

Notes

I wrote an injector that works with the tool. That can be found here

Also to see how I developed this tool and my process behind creating it see my blog post

About

AmsiHook is a project I created to figure out a bypass to AMSI via function hooking.


Languages

Language:C++ 100.0%