Add: med0x2e/NoAmci to Defense Evasion section

This commit is contained in:
pe3zx 2021-08-22 17:43:22 +07:00
parent 6119201ce5
commit 31ada7b6bb

View File

@ -1138,6 +1138,10 @@ Some tools can be categorized in more than one category. But because the current
<td><a href="https://github.com/matterpreter/SHAPESHIFTER">matterpreter/SHAPESHIFTERmatterpreter/SHAPESHIFTER</a></td>
<td>Companion PoC for the "Adventures in Dynamic Evasion" blog post</td>
</tr>
<tr>
<td><a href="https://github.com/med0x2e/NoAmci">med0x2e/NoAmci</a></td>
<td>Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().</td>
</tr>
<tr>
<td><a href="https://github.com/med0x2e/SigFlip">med0x2e/SigFlip</a></td>
<td>SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.</td>