+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: Latest Windows 1909 with Latest Windows Defender (/showthread.php?tid=6060698)
Latest Windows 1909 with Latest Windows Defender - Ren And Stimpy - Mar 27, 2020
Latest Windows 1909 with Latest Windows Defender
You see how no public crpyter is bypassing!
Windows Defender killing the game. Damn I remember back in 2016 when they were the worse!
What you goes doing about bypassing now?
RE: Latest Windows 1909 with Latest Windows Defender - Some0ne.big - Mar 27, 2020
(Mar 27, 2020 11:35 AM)Ren And Stimpy Wrote: Latest Windows 1909 with Latest Windows Defender
You see how no public crpyter is bypassing!
Windows Defender killing the game. Damn I remember back in 2016 when they were the worse!
What you goes doing about bypassing now?
Clean the stub by hand
use private malware
The only possible way to go
RE: Latest Windows 1909 with Latest Windows Defender - Ren And Stimpy - Mar 27, 2020
(Mar 27, 2020 11:43 AM)Some0ne.big Wrote: Clean the stub by hand
use private malware
The only possible way to go
I've done that. The latest win ver 1909 and the latest WD is NO joke,
Once stub is uploaded to internet and downloaded, still having issues bypassing
Also disablers no longer disabling REAL-TIME protection
RE: Latest Windows 1909 with Latest Windows Defender - Some0ne.big - Mar 27, 2020
(Mar 27, 2020 11:49 AM)Ren And Stimpy Wrote: I've done that. The latest win ver 1909 and the latest WD is NO joke,
Once stub is uploaded to internet and downloaded, still having issues bypassing
Also disablers no longer disabling REAL-TIME protection
Do you sign your executables?
where do you upload to?
Disablers don't work no more - thats a fact bro
RE: Latest Windows 1909 with Latest Windows Defender - Vuln - Mar 27, 2020
Interesting. So what exactly changed?
RE: Latest Windows 1909 with Latest Windows Defender - Ren And Stimpy - Mar 27, 2020
(Mar 27, 2020 12:01 PM)Vuln Wrote: Interesting. So what exactly changed?
I see they added Tamper Protection, but not sure exactly what changed, as the earlier verisons can be bypassed easily.
This mother fucker is a beast. I've bypassed it a few times, but then once file is uploaded online then downloaded, it then get detected by WD and on mulitple machines, so it 100% is sharing it on their own database!
Maybe Nyan X Cat, can add some information or suggestions! <3
RE: Latest Windows 1909 with Latest Windows Defender - Mirakuru - Mar 27, 2020
(Mar 27, 2020 11:55 AM)Some0ne.big Wrote: Disablers don't work no more - thats a fact bro
Add Exclusion instead of disabling.
You can use Remote Shell for it.
Example Powershell Command:
Code
Add-MpPreference -ExclusionPath "C:\Temp"Source: https://docs.microsoft.com/en-us/powershell/module/defender/Add-MpPreference?view=win10-ps
Note: It is required Admin rights.
RE: Latest Windows 1909 with Latest Windows Defender - Vuln - Mar 27, 2020
(Mar 27, 2020 12:05 PM)Ren And Stimpy Wrote: I see they added Tamper Protection, but not sure exactly what changed, as the earlier verisons can be bypassed easily.
This mother fugger is a beast. I've bypassed it a few times, but then once file is uploaded online then downloaded, it then get detected by WD and on mulitple machines, so it 100% is sharing it on their own database!
Maybe Nyan X Cat, can add some information or suggestions! <3
Thanks. I will dig into it some more.
RE: Latest Windows 1909 with Latest Windows Defender - Mirakuru - Mar 27, 2020
(Mar 27, 2020 12:05 PM)Ren And Stimpy Wrote: I see they added Tamper Protection, but not sure exactly what changed, as the earlier verisons can be bypassed easily.
This mother fugger is a beast. I've bypassed it a few times, but then once file is uploaded online then downloaded, it then get detected by WD and on mulitple machines, so it 100% is sharing it on their own database!
Maybe Nyan X Cat, can add some information or suggestions! <3
˗ˏˋ NYAN CAT ˎˊ˗ is already added something about it.
<<<< Easy >>>> How to bypass Windows Defender for beginner in 5min
![[Image: Nyan-cat.gif]](https://vignette.wikia.nocookie.net/nyancat/images/d/d3/Nyan-cat.gif)
RE: Latest Windows 1909 with Latest Windows Defender - Ren And Stimpy - Mar 27, 2020
LMAO Mirakuru!!!!
Thanks for the laughs hahahha
RE: Latest Windows 1909 with Latest Windows Defender - SIM-3717028 - Mar 27, 2020
I don't have a problem with win defender using my crypter, might be the actual payload you are using.
RE: Latest Windows 1909 with Latest Windows Defender - Ren And Stimpy - Mar 27, 2020
(Mar 27, 2020 04:20 PM)dsniqwixi Wrote: I don't have a problem with win defender using my crypter, might be the actual payload you are using.
Yea HIGHLY doubt that mate. Def if your using a public crypter and a public RAT or your not on Windows 1909 with updated WD.
RE: Latest Windows 1909 with Latest Windows Defender - SIM-3717028 - Mar 27, 2020
https://imgur.com/a/MODsron
Would recommend you stay away from this user. Very unprofessional, user initiated a conversation with me first and then proceeded to harass me after I made the choice to decline a test stub based on the user's behavior.
RE: Latest Windows 1909 with Latest Windows Defender - CyberStrike - Mar 27, 2020
Windows Defender is rather robust, you have to figure the number of samples which they are getting is massive, not just from the usual providers but also from Outlook, as every attachment is run in a VM on Azure. I have found no documentation of this but my last engagement this happened (about 1 year ago).
RE: Latest Windows 1909 with Latest Windows Defender - NYANxCAT - Mar 27, 2020
(Mar 27, 2020 12:45 PM)Mirakuru Wrote: ˗ˏˋ NYAN CAT ˎˊ˗ is already added something about it.
<<<< Easy >>>> How to bypass Windows Defender for beginner in 5min
Yup, I'm using Windows 1909 + Updated Windows Defender + Internet ON in all my tutorials and HF threads. The thread that you have mentioned is just a basic example yet bypassed WD, and as you see I UP&DW the file using the Edge browser.