I have a custom powershell script payload that I modified from auto-generating utilities in the metasploit framework. Right now it is properly obfuscated and bypasses AV detection in chrome browser, IE, gmail and outlook. Windows smartscreen blocks execution though as it is unsigned and therefore not trusted.
My question is, is there any way I can self-sign the payload with my own certificate or will I need to purchase a certificate from CA reseller in the black market or something? If so, can I be pointed in the right direction to purchase one?
My question is, is there any way I can self-sign the payload with my own certificate or will I need to purchase a certificate from CA reseller in the black market or something? If so, can I be pointed in the right direction to purchase one?