Template-Driven AV/EDR Evasion Framework

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell.

Lifetime AMSI bypass

PowerShell Script Obfuscator

"AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS

JustEvadeBro, a cheat sheet which will aid you through AMSI/AV evasion & bypasses.

NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-build support

Good CLR Host with Native patchless AMSI Bypass

PowerShell Obfuscator. A PowerShell script anti-virus evasion tool

Generator of https://github.com/TheWover/donut in pure Go. supports compression, AMSI/WLDP/ETW bypass, etc.

Vectored Exception Handling Squared

A C# program featuring an all-in-one bypass for CLM, AppLocker and AMSI using Runspace.

A proof of concept AMSI & ETW bypass using trampolines for hooking and modifying execution flow

This PowerShell script applies a memory patch to bypass the Antimalware Scan Interface (AMSI), allowing unrestricted execution of PowerShell commands.

PoC on JIT Flow Redirection and .NET Reflection for Analyzing In-Memory Telemetry Interfaces (AMSI/ETW)

Bypassing amsi.dll via memory patch, simple code!

Simple obfuscated PowerShell revshell generator to bypass AMSI / Windows Defender

OSEP sample codes from the course & more

an undetected (by windows defender, AMSI, and malwarebytes) powershell reverse shell based off of hoaxshell - with firewall bypass