https://github.com/print3m/amsi-dll-wrapper

AMSI DLL-Wrapper (DLL-Implant)
https://github.com/print3m/amsi-dll-wrapper

amsi amsi-patch amsi-wrapper dll-hijacking dll-injection dll-proxying dll-wrapper

Last synced: about 2 months ago
JSON representation

AMSI DLL-Wrapper (DLL-Implant)

• Host: GitHub
• URL: https://github.com/print3m/amsi-dll-wrapper
• Owner: Print3M
• Created: 2024-05-08T19:02:39.000Z (8 months ago)
• Default Branch: main
• Last Pushed: 2024-05-08T19:06:17.000Z (8 months ago)
• Last Synced: 2024-05-08T20:26:25.782Z (8 months ago)
• Topics: amsi, amsi-patch, amsi-wrapper, dll-hijacking, dll-injection, dll-proxying, dll-wrapper
• Language: C++
• Homepage: https://print3m.github.io/blog/amsi-dll-wrapper
• Size: 2.93 KB
• Stars: 1
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Manual DLL-Wrapping Technique (AMSI DLL-Implant)

Visit related blog post for a better understanding of this code: [print3m.github.io/blog/amsi-dll-wrapper](https://print3m.github.io/blog/amsi-dll-wrapper)

This repository demonstrates a technique for creating DLL-Wrappers using a manual implementation of each exported function from the original DLL module. The built-in Windows `amsi.dll` was used as an example here. This technique can be used to perform some **more stealthy DLL-Hijacking tactics**, or for conveniently manipulating module parameters (function input and output) to get a better idea of what is going on.