Home / .NET / CLI

Powershell ScriptBlock Log Bypass / ETW bypass

powershelletwbypass Powershell ScriptBlock Log Bypass / ETW bypass This script can be used to bypass Powershell Logging. It is achieved by patching nt
Information
Category: .NET / CLI
Watchers: 1
Star: 5
Fork: 1
Last update: Nov 11, 2021
Resource links
https://github.com/scriptchildie/powershelletwbypass

powershelletwbypass

Powershell ScriptBlock Log Bypass / ETW bypass

This script can be used to bypass Powershell Logging.

It is achieved by patching ntdll!EtwEventWriteTransfer.

The bypass only works in the current session and not universally on the host. It doesn't interact with any registry values.

Contents

    nohwnd Script, ScriptBlock and module performance profiler for PowerShell 5, and PowerShell 7.
    boku7 CobaltStrike BOF | Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)
    airbus-cert A Splunk Technology Add-on to forward filtered ETW events.
    vector-sec AWS PowerShell Python Lambda, or PSPy for short, is a simple Python 2.7 AWS Lambda function designed to execute the PowerShell binary and marshal input/output to PowerShell.
    siddontang a golang log lib supports level and multi handlers
    tihanyin A list of useful Powershell scripts with 100% AV bypass (At the time of publication).
    adamschwartz Console.log with style.
    Microsoft KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.
    xinbailu PoC memory injection detection agent based on ETW, for offensive and defensive research purposes
    KaLendsi Windows Etw LPE
    SarnaxLii ScriptHook Bypass For Fivem / bypass hardware ID For nvdia only
    airbus-cert Event Trace Log file parser in pure Python
    choojs 📜 - Cute browser logs
    JackieDo A log reader and management tool for Laravel
    Cn33liz CScriptShell, a Powershell Host running within cscript.exe
    ironmansoftware PowerShell Explorer shows information about the PowerShell environment on your machine.
    jantari This PowerShell module lets you create very simple but clickable menus in the PowerShell console.
    tmc Package log wraps logrus to include source line/function information
    pravj :chart_with_upwards_trend: HTTP log monitoring console for Humans
    kraklin Transform Elm Debug.log output into nice log object with custom formatter
    lucasgdb :rocket: A Node.js lib to beautify the console.log from JavaScript with colors, making it easier and useful. :heart:
    Share this repo

    Related Repos


    CLI
    26
    grpc-curl is a command line tool for interacting with gRPC servers
    xoofx grpc-curl grpc-curl is a command line tool for interacting with gRPC servers. This tool is the .NET equivalent of the popular gRPCurl written in Golan
     
    CLI
    6
    This package helps you to make colorful console apps
    Ramin-Guliyev MakeUp Make your console app looks much more pretty 😉 * Introduction This package helps you to make colorful console apps with the best solution. Cur
     
    CLI
    279
    PowerShell Module for Docker
    Microsoft THIS MODULE HAS BEEN DEPRECATED Please note that due to low usage this module is no longer being actively maintained. It is recommended to use either
     
    CLI
    50
    How to spoof the command line when spawning a new process from C#.
    plackyhacker Command Line Spoofer An example of using C# to inject a meterpreter shell, whilst spoofing the command line. The command line is stored in the Process
     
    CLI
    3
    fakys really bad Powershell Northstar Server Watcher
    RomeoCantCode PSNorthstarWatcher faky's really bad Powershell Northstar Server Watcher. Use at own risk. It is very minimalistic and a dev would probably cry when h
     
    CLI
    5
    2D game framework for use with the Pode PowerShell web server
    Badgerati Pode.Game This is still a work in progress, until v1.0.0 expect possible breaking changes in some releases. 💝 A lot of my free time, evenings, and we
     
    CLI
    3
    This is for patching against Log4Shell in Windows via Powershell
    SkeletonMan03 Patch Against Log4Shell This is for patching against Log4Shell in Windows via Powershell What it does This searches your entire computer for jar files
     
    CLI
    8
    log4j PowerShell Checker
    crypt0jan CHAPTER8 - log4j PowerShell Checker CVE-2021-44228 Perform a scan of a single host (using Powershell) to see if it's vulnerable for the above-mentione
     
    CLI
    3
    Customize windows PowerShell using oh-my-posh module and make a simple, elegant and eye ca...
    aminbabu Customize Your Windows Terminal - Like A Pro No more default windows terminal! Let's customize our windows terminal like a pro using oh-my-posh a prom
     
    CLI
    66
    Load any Beacon Object File using Powershell!
    airbus-cert Invoke-Bof Load any Beacon Object File using Powershell! > $BOFBytes = (Invoke-WebRequest -Uri "https://github.com/airbus-cert/Invoke-Bof/raw/main/tes
     
    CLI
    3
    PowerBruteLogon (Ported version of WinBruteLogon in pure PowerShell)
    DarkCoderSc PowerBruteLogon PowerBruteLogon is a ported version of WinBruteLogon in pure PowerShell Notice that this version is slower than WinBruteLogon but has
     
    CLI
    6
    Tools for naturally defining PowerShell dynamic parameters
    wethreetrees ✨ Dynamic ✨ Working with dynamic parameters in PowerShell has never been easy. The Dynamic module will change that forever. In the past, developers we
     
    CLI
    3
    turbinando o powershell
    nathanramorim oh-my-zsh no powershell Sabiam que tem jeito de personalizar o PowerShell similiar a quando utilizamos o oh-my-zsh? Eu nem sabia. Eu curto bastante um
     
    CLI
    3
    PowerShell Module for Advanced Registry Functionality
    jborean93 AdvReg Various cmdlets that expose more advanced functions of the Windows Registry. Documentation Documentation for this module and details on the cmd
     
    CLI
    10
    Demo to create abp module and convert it into microservice.
    antosubash Add a new Module and convert it to a microservice in ABP In this post we will see how to create a modular abp application and convert it to microservi