[somenormalguy]

I found a way to gain command execution access without getting detected by Windows Defender, but now I want to upload something like advanced RAT and execute it. Unfortunately, WD will detect it as soon as it has been uploaded.

how can I disable Windows Defender using command execution?

[DramaKing]

So you have remote desktop access. Is it an administrator account? Obfuscation/crypting is Malware 101.

[DramaKing]

yeah I think its administrator account

And you've never been introduced to the Set-MpPreference PowerShell cmdlet? Of course with desktop access, you can simply go into the WD settings. I don't know why this is difficult.

---

You can just click on the Actions drop-down and click 'Allow.'

[DramaKing]

https://github.com/MrSaighnal/GSR-Google-Slides-RAT

this is what I'm talking about. I don't know how to say...just take a look into it

tried Set-MpPreference but that also didn't work

Another oddball Google services side-channel RAT.

I never accept "didn't work." That is the most unhelpful explanation. Did you try clicking on Allow or going into the Windows Defender settings?