Open-source alternatives to AmsiHook

PowerLessShell rely on MSBuild.exe to remotely execute PowerShell scripts and commands without spawning powershell.exe. You can also execute raw shellcode using the same approach.

Hide your Powershell script in plain sight. Bypass all Powershell security features

Run PowerShell with rundll32. Bypass software restrictions.

The Hunt for Malicious Strings

This repo contains some Amsi Bypass methods i found on different Blog Posts.