+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: Need help to disable Windows Defender (/showthread.php?tid=6285189)
Need help to disable Windows Defender - somenormalguy - Nov 22, 2024
I found a way to gain command execution access without getting detected by Windows Defender, but now I want to upload something like advanced RAT and execute it. Unfortunately, WD will detect it as soon as it has been uploaded.
how can I disable Windows Defender using command execution?
![[Image: NxKocqM.png]](https://i.imgur.com/NxKocqM.png)
RE: Need help to disable Windows Defender - DramaKing - Nov 22, 2024
So you have remote desktop access. Is it an administrator account? Obfuscation/crypting is Malware 101.
RE: Need help to disable Windows Defender - DramaKing - Nov 22, 2024
(Nov 22, 2024 11:30 AM)somenormalguy Wrote: yeah I think its administrator account
And you've never been introduced to the Set-MpPreference PowerShell cmdlet? Of course with desktop access, you can simply go into the WD settings. I don't know why this is difficult.
You can just click on the Actions drop-down and click 'Allow.'
RE: Need help to disable Windows Defender - DramaKing - Nov 22, 2024
(Nov 22, 2024 11:38 AM)somenormalguy Wrote: https://github.com/MrSaighnal/GSR-Google-Slides-RAT
this is what I'm talking about. I don't know how to say...just take a look into it
tried Set-MpPreference but that also didn't work
Another oddball Google services side-channel RAT.
I never accept "didn't work." That is the most unhelpful explanation. Did you try clicking on Allow or going into the Windows Defender settings?