+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Bypass AntiVirus (/showthread.php?tid=6248402)
Bypass AntiVirus - mnt007 - Aug 3, 2023
I made small troijan using ProcessHollowing Technique.
but it had detected AntiVirus - Defender.
I think there is a problem in Process Hollowing.
Anyone know a good way to bypass windows defender?
RE: Bypass AntiVirus - DramaKing - Aug 3, 2023
(Aug 3, 2023 07:44 PM)mnt007 Wrote: I made small troijan using Process Hollowing Technique.
but it had detected AntiVirus - Defender.
I think there is a problem in Process Hollowing.
Anyone know a good way to bypass windows defender?
The problem is that you injected malware into the process. If you didn't create it yourself, its signature is likely know to AV. You should disable Defender, then download the Trojan.
RE: Bypass AntiVirus - mnt007 - Aug 4, 2023
(Aug 3, 2023 09:04 PM)DramaKing Wrote: The problem is that you injected malware into the process. If you didn't create it yourself, its signature is likely know to AV. You should disable Defender, then download the Trojan.
I made it myself. I want to know about AV's detection techniques.
My troijan wasn't detected by Defender with pattern.
I obfuscated it's code for bypassing AV, but ...
RE: Bypass AntiVirus - DramaKing - Aug 4, 2023
(Aug 4, 2023 12:56 AM)mnt007 Wrote: I made it myself. I want to know about AV's detection techniques.
My troijan wasn't detected by Defender with pattern.
I obfuscated it's code for bypassing AV, but ...
Okay, then Defender is catching it with behavioral/heuristic detection. You need to patch AMSI or, as I said, disable Defender / add an exception. The standard version has no defense shields like other AV. You just need to be an administrator.