[l0rf]

I was working on using a python script from the github repo rxwx/CVE-2018-0802, and after I attach and executable it, as I expected, is detected by antivirus. How should I begin analyzing and modifying the code to eventually start to make the code better at less detected?
Thanks

[FoxBlood]

Encode the source code, and execute it, usually an anti-virus check the signature of the program, if there is any byte modified in source code, you get another signature. Other anti-virus create a virtual environment in memory and test the program.

[l0rf]

Encode the source code, and execute it, usually an anti-virus check the signature of the program, if there is any byte modified in source code,  you get another signature. Other anti-virus create a virtual environment in memory and test the program.

What do you mean by encode the source code?

[Infamia]

What do you mean by encode the source code?

nothing intelligent.

antiviruses do both static analysis and dynamic analysis (during the process' runtime) of programs, in python's case, the AV will most likely signature the compiled bytecode, and/or perhaps do some form of call-graph analysis.

just change it around a bit, it might just be the way you're attaching it, pretty much no antiviruses actually implement analysis for python bytecode last i checked:

... and after I attach and executable it ...

are you freezing it to an executable? most EXE packing software creates a whole ton of false positives regardless of whether it is malware or not, perhaps the way you attach it is detected.