Jump to content

Patching AMSI in Memory with Rust A Red Teamer’s Guide: Revision history

Diff selection: Mark the radio buttons of the revisions to compare and hit enter or the button at the bottom.
Legend: (cur) = difference with latest revision, (prev) = difference with preceding revision, m = minor edit.

22 November 2025

  • curprev 17:1317:13, 22 November 2025 PC talk contribs 7,011 bytes +7,011 Created page with "500px Hey everyone! Maverick here. I’m a red team enthusiast who recently decided to level-up my Rust game. Over the next few months I’ll be rewriting a bunch of classic offensive techniques in Rust, both to practice the language and to have cleaner, faster tools in my kit. Today we’re looking at one of the most classic Windows living-off-the-land tricks: bypassing AMSI (Antimalware Scan Interface) by directly patching AmsiS..."
Retrieved from "https://johnwick.cc/index.php?title=Patching_AMSI_in_Memory_with_Rust_A_Red_Teamer’s_Guide"