ClrAmsiScanPatcher aims to bypass the AMSI scan during an attempt to load an assembly through the Assembly.Load function.
This is done by finding the AmsiScan function within clr.dll by finding an instruction that references a known string, and then patching the function to remove it's functionality.
This is not the same as patching AmsiScanBuffer but will have a similar effect.
backdoorskid/ClrAmsiScanPatcher
Folders and files
| Name | Name | Last commit date | ||
|---|---|---|---|---|