AMSIRubeusbypass
July 25, 2022 ยท View on GitHub
AMSI bypass hooking NtCreateSection
POC for Rubeus execution.
Execute Openssl-Dev.exe "commands" to execute Rubeus (file deletefile.txt has to be in the same path, or change the file in the code)
July 25, 2022 ยท View on GitHub
AMSI bypass hooking NtCreateSection
POC for Rubeus execution.
Execute Openssl-Dev.exe "commands" to execute Rubeus (file deletefile.txt has to be in the same path, or change the file in the code)