Convert to Windows Defender DLL injector

[iwystic]

Hello, for some reason Windows does not check amsi.dll in syswow64 which allows for easy dll hijacking.
It will automatically be injected into %50 of processes by Windows Defender itself.

amsi.dll = "anti malware scan interface" - mainly used for detecting malicious scripts (powershell/vbscript etc.)

---

https://github.com/klinix5/WinDefendInjectPoC

NOTE: This source has nothing to do with the above method.

 

[ajstgerm821]

Thanks for this

 

[tarlyn]

ayo this helped thanks

 

[unosaki90864]

454 monkeys

 

[viomersak]

HAHAHAHAHA

 

[Bytrazz1779]

This really helps, thank you.

 

[LaoGanMa]

emmmmmlike

 

[kayden21]

Omg this can be used for many things nice find

 

[aguetoni]

janelas e seus problemas,

 

[morningstar]

Asa bhi ho sakta hai kya