+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Bypass Google Chrome Antivirus (/showthread.php?tid=6274755)
Bypass Google Chrome Antivirus - ༄Anna༄ - Jul 4, 2024
What is the best way to avoid triggering google chrome detection when someone will download my file ?
I mean it's better to put everything in an RAR archive with a password or in a ZIP with a password ?
RE: Bypass Google Chrome Antivirus - DramaKing - Jul 4, 2024
(Jul 4, 2024 06:09 AM)AnnaEngineer Wrote: What is the best way to avoid triggering google chrome detection when someone will download my file ?
I mean it's better to put everything in an RAR archive with a password or in a ZIP with a password ?
This thread explains Google Safe Browsing: https://hackforums.net/showthread.php?tid=6244776.
RE: Bypass Google Chrome Antivirus - Tentco - Jul 4, 2024
Google chrome Scanner is solely based on scantime, so you can do 2 things, either pump the file size to like 500mb around smh to exhaust the scanner, or obfuscate it properly/use a stager for your final payload.
RE: Bypass Google Chrome Antivirus - DramaKing - Jul 4, 2024
(Jul 4, 2024 07:38 AM)Tentco Wrote: Google chrome Scanner is solely based on scantime, so you can do 2 things, either pump the file size to like 500mb around smh to exhaust the scanner, or obfuscate it properly/use a stager for your final payload.
It's not just AMSI signature detection. Reputation plays a part, too. See the thread that I posted.
RE: Bypass Google Chrome Antivirus - Tentco - Jul 4, 2024
(Jul 4, 2024 09:27 AM)DramaKing Wrote: It's not just AMSI signature detection. Reputation plays a part, too. See the thread that I posted.
Reputation has nothing to do with "This File is malicious warning.", the topic is about bypassing anti-virus not other warnings like- "This File is not Commonly Downloaded.", Good thread though.
Also the rep part is for red screen which can be easily bypassed, but im sure any one would have their own host to upload files and stuff.
RE: Bypass Google Chrome Antivirus - DramaKing - Jul 4, 2024
(Jul 4, 2024 09:31 AM)Tentco Wrote: Reputation has nothing to do with "This File is malicious warning.", the topic is about bypassing anti-virus not other warnings like- "This File is not Commonly Downloaded.", Good thread though.
Also the rep part is for red screen which can be easily bypassed, but im sure any one would have their own host to upload files and stuff.
I concede the point.
RE: Bypass Google Chrome Antivirus - ༄Anna༄ - Jul 4, 2024
(Jul 4, 2024 12:24 PM)wilzonsss Wrote: ty for this
???
RE: Bypass Google Chrome Antivirus - DramaKing - Jul 4, 2024
(Jul 4, 2024 12:45 PM)AnnaEngineer Wrote: ???
What [mention=5543725] did is to post any random bit of text in any random thread in order to download an attachment.
RE: Bypass Google Chrome Antivirus - Brill - Jul 6, 2024
(Jul 4, 2024 07:38 AM)Tentco Wrote: Google chrome Scanner is solely based on scantime, so you can do 2 things, either pump the file size to like 500mb around smh to exhaust the scanner, or obfuscate it properly/use a stager for your final payload.
this pretty much sums up viable options. proper obfuscation and staged payloads are your best bet.
I suppose, in some unlikely situation, if you have control over the dns you can sinkhole the safe browsing domains, but you'll still get caught by defender without adequate obfuscation.
sb-ssl.google.com
safebrowsing.googleapis.com
safebrowsing-cache.google.com
safebrowsing.google.com