[Oddcod3]

Phantom-Evasion is a malware stub generator tool written in python both compatibile with python 2.7 and 3.4 or higher( note that python 2.7 is required for pyinstaller). The aim of this tool is to make antivirus evasion an easy task for pentesters with the use of prewritten modules capable to generate (almost) undetectable executable even with most common 32 bit metasploit payload.

Format: exe elf apk dmg


Capable of apk backdoor embedding

First version released

Github: oddcod3/Phantom-Evasion

[Hackism]

thank for this, will take a look. and learn more on this

[hal90000]

awesome. i cant wait to play around with this

[Oddcod3]

Next week i'll release more windows and linux payload generator modules

[javinzplayer]

TheFatRat does the exact same thing. FatRat has been around longer then this tool + it has better obfuscator options.

[Oddcod3]

TheFatRat is pretty much outdated and ruined , all the exe payloads generated when scanned with Nodistribute are detected by 26/37 or 16/37 AV (including AVAST AVG) so i guess you're a bit outdated too.
This tool evade all the major AVs (AVAST AVG AVIRA) with almost 0/37 rate of detection for every types of generated payload even with the most common msfvenom payloads.

[Oddcod3]

Fixed bugs in linux and universal modules
Version 0.2 will be released soon
New features:
> advanced encryption
> new windows and linux modules
> better metamorphism

[beastjesus]

Thank you for this tool. You are a beautiful young man and I love you.

[Oddcod3]

Thank you, i'm really glad you like it! You just made my day!

[AceHardware]

Im about to go test it out

[waste49]

nice framework , thanks , it's a good alternative to Veil

[Oddcod3]

NEW VERSION 0.2 RELEASED
New features:
>Custom multibyte XOR encoder
>Powershell payload supported
>64 bit payload supported
>updated previous modules

---

Now you can use Empire one line powershell payload with the module "polymorphic powershell oneline dropper" or drop msfvenom powershell payload and custom powershell payloads with the module "polymorphic powershell script dropper"

[MohammedZr]

Thank you , you just made my day !

[Leonfluf]

Very nice Framework!
I searched very long for something like this but nerver really found something,
I also agree with you that theFatRat is outdated and also unFUD. I´m using it now for 5 days and nerver had problems with it.
When i would have the chance to +rep you i would.
Regrats,
Leonfluf 🤝

[eric2221]

awesome thank for this 🤝