Pinned post
I was playing around AMSI and came up with some interesting bypass techniques.
6 techniques validated with a live reverse shell on a fully patched Windows 11, Defender on. bl4ckarch.github.io/posts/One-Bool…
#AMSI #RedTeam #WindowsSecurity #ReverseEngineering #Pentest
bl4ckarch.github.io One Bool. Six Shells. AMSI’s Design Problem. A research study into the Anti-Malware Scan Interface (AMSI) combining Ghidra decompilation of amsi.dll, Frida dynamic instrumentation, and live bypass testing with Windows Defender active. Six... 6 techniques validated with a live reverse shell on a fully patched Windows 11, Defender on. bl4ckarch.github.io/posts/One-Bool…
#AMSI #RedTeam #WindowsSecurity #ReverseEngineering #Pentest
