Skip to content
PSAmsi is a tool for auditing and defeating AMSI signatures.
Branch: master
Clone or download
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
PSAmsi PSAmsiClient missing PSAmsiScanner bug fixed. Apr 22, 2018
LICENSE PSAmsi v1.0, released at DerbyCon 2017 Sep 22, 2017
PSAmsiClient.ps1 PSAmsiClient missing PSAmsiScanner bug fixed. Apr 22, 2018
README.md PSAmsi v1.0, released at DerbyCon 2017 Sep 22, 2017

README.md

PSAmsi

PSAmsi is a tool for auditing and defeating AMSI signatures.

It's best utilized in a test environment to quickly create payloads you know will not be detected by a particular AntiMalware Provider, although it can be useful in certain situations outside of a test environment.

When using outside of a test environment, be sure to understand how PSAmsi works, as it can generate AMSI alerts.

Getting Started

Installation instructions and an introduction to using PSAmsi are available in the Wiki.

Disclaimer

You are only authorized to use PSAmsi (and payloads created with PSAmsi) on systems that you have permission to use it on. It was created for research purposes only.

Acknowledgements

A huge thanks to the following people whose code is used by PSAmsi:

You can’t perform that action at this time.