- It's messy af, its a poc.
- x64 in Debug mode with Debugger attached doesn't work, don't know why, don't really care.
- scan.cpp is just to invoke the AmsiScanBuffer function for testing.
0xjbb / amsi-patch Goto Github PK
View Code? Open in Web Editor NEWAMSI ScanBuffer Patch with API Hook poc