Open-source alternatives to Amsi Bypass Powershell

PowerLessShell rely on MSBuild.exe to remotely execute PowerShell scripts and commands without spawning powershell.exe. You can also execute raw shellcode using the same approach.

Hide your Powershell script in plain sight. Bypass all Powershell security features

Run PowerShell with rundll32. Bypass software restrictions.

The Hunt for Malicious Strings