+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: how to bypass antivirus for a metasploit payload? (/showthread.php?tid=5979719)
how to bypass antivirus for a metasploit payload? - BrunoB - Jun 14, 2019
Hi,
I'm trying to get a meterpreter exe through windows 10 AV.
I tried using shellter witch unfortunately doesn't work. The windows AV gets It.
Any suggestions on how I could get this through?
P.S. I'm new to this so I don't have much experience...
RE: how to bypass antivirus for a metasploit payload? - __Digital__ - Jun 14, 2019
(Jun 14, 2019 07:59 AM)BrunoB Wrote: Hi,
I'm trying to get a meterpreter exe through windows 10 AV.
I tried using shellter witch unfortunately doesn't work. The windows AV gets It.
Any suggestions on how I could get this through?
P.S. I'm new to this so I don't have much experience...
The best way to get your payload to the machine is to use a downloader. The downloader would interact/use the builtin cmdlets for defender to tell defender what to do instead of it default settings. Once you have executed the correct cmdlets your file would be downloaded and executed which would bypass defender if done correctly.
RE: how to bypass antivirus for a metasploit payload? - BrunoB - Jun 14, 2019
(Jun 14, 2019 10:52 AM)__Digital__ Wrote: The best way to get your payload to the machine is to use a downloader. The downloader would interact/use the builtin cmdlets for defender to tell defender what to do instead of it default settings. Once you have executed the correct cmdlets your file would be downloaded and executed which would bypass defender if done correctly.what downloader would you recommend?
RE: how to bypass antivirus for a metasploit payload? - Faith Connors - Jun 14, 2019
(Jun 14, 2019 11:21 AM)BrunoB Wrote: what downloader would you recommend?
the one you write yourself
come on, its literally a single line of powershell code
RE: how to bypass antivirus for a metasploit payload? - javinzplayer - Jun 14, 2019
You can use some of the evasion techniques like Veil Evasion or use any other EXE cryptots like Themida, Enigma, and others.
RE: how to bypass antivirus for a metasploit payload? - __Digital__ - Jun 14, 2019
(Jun 14, 2019 11:21 AM)BrunoB Wrote: what downloader would you recommend?
As Faith told you before i could the one you make yourself then you know its clean and not dirty.
RE: how to bypass antivirus for a metasploit payload? - W32.DisTrack - Jun 15, 2019
(Jun 14, 2019 11:25 AM)Faith Connors Wrote: the one you write yourself
come on, its literally a single line of powershell code
Yeah, any skid can do that ;)
RE: how to bypass antivirus for a metasploit payload? - Faith Connors - Jun 15, 2019
(Jun 15, 2019 07:31 AM)W32.DisTrack Wrote: Yeah, any skid can do that ;)
i mean im a skid and i can do it :P
RE: how to bypass antivirus for a metasploit payload? - W32.DisTrack - Jun 15, 2019
(Jun 15, 2019 10:58 AM)Faith Connors Wrote: i mean im a skid and i can do it :P
Exactly my point lol. I'm not sure why the skids haven't hopped on the powershell train.