# HeapsOfFun

**Repository Path**: delete_user/HeapsOfFun

## Basic Information

- **Project Name**: HeapsOfFun
- **Description**: AMSI Bypass Via the Heap
- **Primary Language**: Unknown
- **License**: Apache-2.0
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2021-01-24
- **Last Updated**: 2021-10-20

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# HeapsOfFun
AMSI VBA Bypass Via the Heap based on the work of Matt Graeber mattifestation

x32 Code and x64 are basically the same Long just has to be LongPtr in a couple of places

x32
![HeapsOfFun](https://github.com/rmdavy/HeapsOfFun/blob/master/heapoffun.jpg)


x64
![HeapsOfFun](https://github.com/rmdavy/HeapsOfFun/blob/master/amsi_heapwalk_x64.jpg)