OmerYa/Invisi-Shell

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1339 stars · 175 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Invisi-Shell is a proof-of-concept tool that bypasses PowerShell security features (ScriptBlock logging, Module logging, Transcription, AMSI) by hooking .NET assemblies via the CLR Profiler API. It is written in C++ and delivered as a compiled profiler DLL with batch launchers.

Use cases

• bypass powershell script block logging
• evade amsi scanning for powershell scripts
• run powershell scripts without transcription logging
• red team tooling for windows defense evasion
• research powershell security controls

When to choose

• you need a POC demonstrating CLR Profiler API-based PowerShell security bypasses on x64 PowerShell 5.1
• you are doing authorized red team or security research on Windows

When to avoid

• you need a maintained, production-ready tool (last release 2019, POC only)
• you target PowerShell versions other than 5.1 or non-x64 processes
• you lack authorization to test security controls

Facets

library · maturity maintenance

security penetration-testing security penetration-testing windows windows cpp powershell amsi-bypass clr-profiler red-team defense-evasion poc

Member repositories

For agents

markdown · JSON · MCP: product_card(name="OmerYa/Invisi-Shell")