rmdavy/AMSI_Ordinal_Bypass rmdavy/AMSI_Ordinal_Bypass

  • Stars
    star
    38
  • Rank 682,856 (Top 14 %)
  • Language VBA
  • License
    Apache License 2.0
  • Created about 4 years ago
  • Updated about 1 year ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
rmdavy/AMSI_Ordinal_Bypass
github

rmdavy

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Bypass AMSI and Defender using Ordinal Values

More Repositories

1

HeapsOfFun

AMSI Bypass Via the Heap
VBA
103
star
2

WordAmsiBypass

35
star
3

VBAFunctionPointers

VBA
20
star
4

AmsiPEBWalkVBA

Walking the PEB in VBA
VBA
20
star
5

redtest

PowerShell
16
star
6

AmsiPEBWalkVBAx64

VBA
14
star
7

hashmatch

Audits AD hashdump and looks for instances for password reuse
Python
13
star
8

badodf

Creates a malicious ODF document help leak NetNTLM Creds
Python
12
star
9

enumprocmodules

Get Amsi Function Addresses Using EnumProcessModules & Half a Peb walk
VBA
6
star
10

PasswordAuditor

Password Auditor generates various useful outputs for reporting when conducting a Windows based password Audit
Python
5
star
11

ntlmrelayx-wrap

Wrapper Code for Impacket NTLMRelayX
Python
3
star
12

reads

REsponder Active Database Sifter
Python
3
star
13

nexport

Nessus Parsing Tool
Python
2
star
14

pathchecker

Checks if folders in PATH are writable
Go
2
star
15

qdsp

Quick and Dirty SPN Parser
Python
1
star
16

ipfreely

Python
1
star
17

hash2spray

make spraying a little easier
Python
1
star
18

Kerberoasting

I have created a small C# project that requests a Ticket Granting Service ticket using KerberosSecurityTokenProvider to use for Kerberoasting. I started the project for educational purposes only, but the tool works fine and is not detected by Microsoft Defender for Identity.
C#
1
star