diff --git a/Offensive.md b/Offensive.md index 0930adb..6488157 100644 --- a/Offensive.md +++ b/Offensive.md @@ -1138,6 +1138,10 @@ Some tools can be categorized in more than one category. But because the current matterpreter/SHAPESHIFTERmatterpreter/SHAPESHIFTER Companion PoC for the "Adventures in Dynamic Evasion" blog post + + med0x2e/NoAmci + Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load(). + med0x2e/SigFlip SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.