flangvik/amsi.fail

C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

amsi.fail's Issues

Api Not Working

Hello i hope you well ,
The Api Is Not Working !
https://amsifail.flangvik.workers.dev/api/Generate

Just a simple question.Why "HTMLEncode" function is not used/called?

the title is kinda self-explanatory

Instead of hosting the code on Azure,we can "abuse" online compilers to generate the AMSI Bypass.

Probably a lot of people use AMSI.fail's API instead of the front-end website 😂
and cause hosting Azure is not cheap, we can abuse online compilers, for example dotnetfiddle.net.
I found dotnetfiddle's API that we can use to send a POST request in a form of JSON that contain the code (and some other parameters). And after we get the response in a form of JSON, we can do some parsing and get the ConsoleOutput and after that just execute it directly.
I made a PoC in Powershell if you want to check it out
on the PoC,i use the AMSI.fail code that i port to C# 5 compatible and i made some changes to the Rasta-Mouse's ASB Patch to make it diskless