maride/hacktricks
1
0
Fork 0
mirror of https://github.com/HackTricks-wiki/hacktricks.git synced 2025-10-10 18:36:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix you will are with you will use in basic-powershell-for-pentesters

Browse Source
This commit is contained in:
Neved4 2025-01-14 22:52:11 +01:00
parent 04f453fea8
commit d13f1d6355
1 changed files with 1 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/windows-hardening/basic-powershell-for-pentesters/README.md
View File

@ -141,7 +141,7 @@ ValueData : 0
**`amsi.dll`** is **loaded** into your process, and has the necessary **exports** for any application interact with. And because it's loaded into the memory space of a process you **control**, you can change its behaviour by **overwriting instructions in memory**. Making it not detect anything. **`amsi.dll`** is **loaded** into your process, and has the necessary **exports** for any application interact with. And because it's loaded into the memory space of a process you **control**, you can change its behaviour by **overwriting instructions in memory**. Making it not detect anything.
Therefore, the goal of the AMSI bypasses you will are to **overwrite the instructions of that DLL in memory to make the detection useless**. Therefore, the goal of the AMSI bypasses you will use is to **overwrite the instructions of that DLL in memory to make the detection useless**.
**AMSI bypass generator** web page: [**https://amsi.fail/**](https://amsi.fail/) **AMSI bypass generator** web page: [**https://amsi.fail/**](https://amsi.fail/)
@ -465,6 +465,3 @@ RawDescriptor : System.Security.AccessControl.CommonSecurityDescriptor
``` ```
{{#include ../../banners/hacktricks-training.md}} {{#include ../../banners/hacktricks-training.md}}