+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Pentesting and Forensics (https://hackforums.net/forumdisplay.php?fid=231)
+---- Thread: Mortar Loader - Red teaming evasion technique to defeat and divert detection. (/showthread.php?tid=6188793)
Mortar Loader - Red teaming evasion technique to defeat and divert detection. - ĐĮΜĘ - Jan 12, 2022
Mortar Loader performs encryption and decryption of selected binary inside the memory streams and execute it directly with out writing any malicious indicator into the hard-drive. Mortar is able to bypass modern anti-virus products and advanced XDR solutions and it has been tested and confirmed bypass for the following:
Kaspersky ✔️
ESET ✔️
Malewarebytes ✔️
Mcafee ✔️
Cortex XDR ✔️
Windows defender ✔️
Cylance✔️
TrendMicro ✔️
Bitdefender ✔️
Norton Symantec ✔️
https://github.com/0xsp-SRD/mortar
RE: Mortar Loader - Red teaming evasion technique to defeat and divert detection. - Perplex - Jan 12, 2022
Was just checking it out earlier, the research article on 0xsp is nicely written.
Good stuff
RE: Mortar Loader - Red teaming evasion technique to defeat and divert detection. - Perplex - Jan 12, 2022
(Jan 12, 2022 10:20 AM)Incog Wrote: Saw this on another forum, worth looking into, if people can link articles about it would be great
Based on the research of this talk> https://www.youtube.com/watch?v=H7EMBz7GLMk
Link is in the github, so you probably found already, but if not, then here
RE: Mortar Loader - Red teaming evasion technique to defeat and divert detection. - MeW11 - Jan 12, 2022
Thank you kind sir! 🙏 good karma for you
RE: Mortar Loader - Red teaming evasion technique to defeat and divert detection. - H4x10r - Jan 13, 2022
wont even bypass defender mates need to be customized