discovered 03 Aug 2026
PSByPassCLM
→ View on GitHubPSByPassCLM is a C# tool designed to circumvent PowerShell's Constrained Language Mode, enabling execution of commands in low-privilege PowerShell consoles, particularly on modern Windows operating systems with AppLocker. Its notable features include utilizing the "InstallUtil.exe" technique to launch a subshell or a reverse shell, thereby overcoming limitations imposed by AppLocker and the constrained environment. The tool can be compiled easily with Visual Studio and is meant for use in penetration testing scenarios.