AMSI Write Raid Bypass Vulnerability | OffSec
In this blog post, we'll introduce a new bypass technique designed to bypass AMSI without the VirtualProtect API and without changing memory protection.
“Stubs” in the .NET Runtime
mattwarren.orgAs the saying goes: “All problems in computer science can be solved by another level of indirection”- David Wheeler