I have a reverse shell on a pc lets say and I need to deploy my full rat but it is detected so im trying to run a exclusion command to exclude users how can i do this any other way?
Elevation |
(Sep 9, 2025 05:03 AM)Badgersss Wrote: I have a reverse shell on a pc lets say and I need to deploy my full rat but it is detected so im trying to run a exclusion command to exclude users how can i do this any other way? You should avoid using Defender exclusion commands as they’re noisy, logged, and often blocked by EDR. Instead, you should run your RAT filelessly via in-memory loaders or process injection into trusted processes. Tools like ScareCrow, sRDI, or LOLBAS techniques offer stealthier, more reliable deployment paths. |
|
|



![[Image: 9428137.gif]](https://i.postimg.cc/Ghyw1KPs/9428137.gif)