!VULN needs AMSI bypass before running

[watchdog]

Ive been testing this out - love it! this is more of a feature request, but the !vuln plugin script gets picked up by AMSI - was wondering if you could implement to run an AMSI bypass first, then run this script?

Perhaps its already doing this, but getting picked up because its dropped to the file system?

[xct]

Thanks, you are right about that - it does not use the AMSI Bypass when using that command. I'll try to add it when I find some time.

When I built this I did not see a way to execute it without having a temporary file, might be possible though.

[xct]

Should be good now.