Add: rasta-mouse/AmsiScanBufferBypass to Defense Evasion section

This commit is contained in:
pe3zx 2021-08-22 17:53:19 +07:00
parent 32d0587ca1
commit 4a96a5ce2a

View File

@ -1207,6 +1207,10 @@ Some tools can be categorized in more than one category. But because the current
<td><a href="https://github.com/PwnDexter/SharpEDRChecker">PwnDexter/SharpEDRChecker</a></td>
<td>Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers metadata, all for the presence of known defensive products such as AV's, EDR's and logging tools.</td>
</tr>
<tr>
<td><a href="https://github.com/rasta-mouse/AmsiScanBufferBypass">rasta-mouse/AmsiScanBufferBypass</a></td>
<td>Bypass AMSI by patching AmsiScanBuffer</td>
</tr>
<tr>
<td><a href="https://github.com/RedCursorSecurityConsulting/PPLKiller">RedCursorSecurityConsulting/PPLKiller</a></td>
<td>Tool to bypass LSA Protection (aka Protected Process Light)</td>