https://github.com/rmdavy/HeapsOfFun

AMSI Bypass Via the Heap
https://github.com/rmdavy/HeapsOfFun

Last synced: about 1 month ago
JSON representation

AMSI Bypass Via the Heap

• Host: GitHub
• URL: https://github.com/rmdavy/HeapsOfFun
• Owner: rmdavy
• License: apache-2.0
• Created: 2020-04-16T22:45:15.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2020-11-20T13:25:36.000Z (almost 4 years ago)
• Last Synced: 2024-06-07T00:33:23.872Z (3 months ago)
• Language: VBA
• Size: 1.23 MB
• Stars: 104
• Watchers: 4
• Forks: 12
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-hacking-lists - rmdavy/HeapsOfFun - AMSI Bypass Via the Heap (VBA)

README

        
# HeapsOfFun

AMSI VBA Bypass Via the Heap based on the work of Matt Graeber mattifestation

x32 Code and x64 are basically the same Long just has to be LongPtr in a couple of places

x32

![HeapsOfFun](https://github.com/rmdavy/HeapsOfFun/blob/master/heapoffun.jpg)

x64

![HeapsOfFun](https://github.com/rmdavy/HeapsOfFun/blob/master/amsi_heapwalk_x64.jpg)