Ｓｅｃ Ｎｏｔｅ
ОтветNew blog on using CLR customizations to improve the OPSEC of your .NET execution harness. This includes a novel AMSI bypass that identified by author in 2023. By taking control of CLR assembly loads, we can load assemblies from memory with no AMSI scan.
Proof-of-concept for the AMSI bypass and anI read and researched on it but another lovely guy did it finally
Calling the CLR Without metahost.h
#Clr
16 · 944 ·