Skip to content

updated worker js similar to http://amsi.fail#8

Open
krajeshnataraj wants to merge 1 commit intoFlangvik:masterfrom
krajeshnataraj:master
Open

updated worker js similar to http://amsi.fail#8
krajeshnataraj wants to merge 1 commit intoFlangvik:masterfrom
krajeshnataraj:master

Conversation

@krajeshnataraj
Copy link

No description provided.

Flangvik pushed a commit that referenced this pull request Feb 16, 2026
…lution

- Bug #13: Add [string] cast to encodeStringChars first element to prevent
  PS integer addition instead of string concatenation (e.g. Normalize(472))
- Bug #1: RastaBuf/ScanBufferPatchAlt resolve VirtualProtect via
  GetProcAddress + delegate instead of UnsafeNativeMethods (which lacks it)
- Bug #6: Stage 2 bare string replacement now only replaces inside quoted
  strings, preventing method name corruption (e.g. ::WriteInt32 → ::'+$())
- Bug #8: Stage 4 junk insertion skips here-string regions (C# code blocks)
- Bug #9: Stage 5 case randomization skips here-string regions
- Bug #10: Stage 6 IEX wrapping skipped for here-string techniques (avoids
  escaping " which destroys @" and "@ delimiters)
- Bug #12: XOR unsigned fix with >>> 0 in obfuscateInt
- Bug #14: encodeStringReverse/encodeStringFormat fall back for strings
  containing single quotes
- Stage 1 variable renaming now skips here-string regions
- Removed WriteInt32 from MattGRef02 sensitiveStrings (method names cannot
  be string-replaced in static calls)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

Comments