ClrAmsiScanPatcher aims to bypass the AMSI scan during an attempt to load an assembly through the Assembly.Load function.
This is done by finding the AmsiScan function within clr.dll by finding an instruction that references a known string, and then patching the function to remove it's functionality.
This is not the same as patching AmsiScanBuffer but will have a similar effect.
-
Notifications
You must be signed in to change notification settings - Fork 11
Patches the AmsiScan function in clr.dll allowing for unrestricted assembly loading in .NET
License
backdoorskid/ClrAmsiScanPatcher
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
Patches the AmsiScan function in clr.dll allowing for unrestricted assembly loading in .NET
Resources
License
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published