Explore various AMSI-bypass techniques and mechanisms in this 39-minute Black Hat conference talk. Review existing and potential approaches for detecting bypasses and reducing attack surfaces. Discover a new, undocumented bypass technique that targets AMSI providers' code instead of amsi.dll. Gain insights into abusing AMSI design and learn about cutting-edge research in this field. Presented by Maor Korkos, this briefing offers valuable information for cybersecurity professionals and researchers interested in AMSI vulnerabilities and defenses.
AMSI Unchained - Review of Known AMSI Bypass Techniques and Introducing a New One
Overview
Syllabus
AMSI & Bypass: Review of Known AMSI Bypass Techniques and Introducing a New One
Taught by
Black Hat
Related Courses
-
A New Method to Bypass 64-bit Linux ASLR
-
Windows Defender - Demystifying and Bypassing ASR by Understanding the AV's Signatures
-
Dirty Vanity - A New Approach to Code Injection & EDR Bypass
-
Universal DDoS Mitigation Bypass
-
Thinking Outside the Sandbox - Violating Trust Boundaries in Uncommon Ways
-
Knockout Win Against TCC - New Ways to Bypass Your MacOS Privacy Mechanisms
