[Ren And Stimpy]

Latest Windows 1909 with Latest Windows Defender


You see how no public crpyter is bypassing!

Windows Defender killing the game. Damn I remember back in 2016 when they were the worse!


What you goes doing about bypassing now?

[Some0ne.big]

Latest Windows 1909 with Latest Windows Defender


You see how no public crpyter is bypassing!

Windows Defender killing the game.  Damn I remember back in 2016 when they were the worse!


What you goes doing about bypassing now?

Clean the stub by hand
use private malware

The only possible way to go

[Ren And Stimpy]

Clean the stub by hand
use private malware

The only possible way to go

I've done that. The latest win ver 1909 and the latest WD is NO joke,
Once stub is uploaded to internet and downloaded, still having issues bypassing

Also disablers no longer disabling REAL-TIME protection

[Some0ne.big]

I've done that.  The latest win ver 1909 and the latest WD is NO joke,
Once stub is uploaded to internet and downloaded, still having issues bypassing

Also disablers no longer disabling REAL-TIME protection

Do you sign your executables?
where do you upload to?

Disablers don't work no more - thats a fact bro

[Vuln]

Interesting. So what exactly changed?

[Ren And Stimpy]

Interesting. So what exactly changed?

I see they added Tamper Protection, but not sure exactly what changed, as the earlier verisons can be bypassed easily.
This mother fucker is a beast. I've bypassed it a few times, but then once file is uploaded online then downloaded, it then get detected by WD and on mulitple machines, so it 100% is sharing it on their own database!

Maybe Nyan X Cat, can add some information or suggestions! <3

[Mirakuru]

Disablers don't work no more - thats a fact bro

Add Exclusion instead of disabling.
You can use Remote Shell for it.

Example Powershell Command:

Code

Add-MpPreference -ExclusionPath "C:\Temp"

Source: https://docs.microsoft.com/en-us/powersh...w=win10-ps

Note: It is required Admin rights.

[Vuln]

I see they added Tamper Protection, but not sure exactly what changed, as the earlier verisons can be bypassed easily.
This mother fugger is a beast.   I've bypassed it a few times, but then once file is uploaded online then downloaded, it then get detected by WD and on mulitple machines, so it 100% is sharing it on their own database!

Maybe Nyan X Cat, can add some information or suggestions!  <3

Thanks. I will dig into it some more.

[Mirakuru]

I see they added Tamper Protection, but not sure exactly what changed, as the earlier verisons can be bypassed easily.
This mother fugger is a beast.   I've bypassed it a few times, but then once file is uploaded online then downloaded, it then get detected by WD and on mulitple machines, so it 100% is sharing it on their own database!

Maybe Nyan X Cat, can add some information or suggestions!  <3

˗ˏˋ NYAN CAT ˎˊ˗ is already added something about it.

<<<< Easy >>>> How to bypass Windows Defender for beginner in 5min

[Ren And Stimpy]

LMAO Mirakuru!!!!
Thanks for the laughs hahahha

[SIM-3717028]

I don't have a problem with win defender using my crypter, might be the actual payload you are using.

[Ren And Stimpy]

I don't have a problem with win defender using my crypter, might be the actual payload you are using.

Yea HIGHLY doubt that mate. Def if your using a public crypter and a public RAT or your not on Windows 1909 with updated WD.

[SIM-3717028]

https://imgur.com/a/MODsron
Would recommend you stay away from this user. Very unprofessional, user initiated a conversation with me first and then proceeded to harass me after I made the choice to decline a test stub based on the user's behavior.

[CyberStrike]

Windows Defender is rather robust, you have to figure the number of samples which they are getting is massive, not just from the usual providers but also from Outlook, as every attachment is run in a VM on Azure. I have found no documentation of this but my last engagement this happened (about 1 year ago).

[NYANxCAT]

˗ˏˋ NYAN CAT ˎˊ˗ is already added something about it.

<<<< Easy >>>> How to bypass Windows Defender for beginner in 5min

Yup, I'm using Windows 1909 + Updated Windows Defender + Internet ON in all my tutorials and HF threads. The thread that you have mentioned is just a basic example yet bypassed WD, and as you see I UP&DW the file using the Edge browser.