[lokich]

Can metasploit reverse shell be detected by AV?

[DramaKing]

Can metasploit reverse shell be detected by AV?

AMSI or AV will block it 100%.

[psickophant]

Best to code your own reverse shell or borrow one of the trillions on the internet then modify it manually to bypass AV and EDR. I have had good luck with PowerShell reverse shells. It takes much less effort to get it past AV and AMSI than many other languages. You can check your modification with the online scanner noDistribute (DO NOT us Virustotal.). Sometimes it is tricky getting it past AMSI though. You may need to patch it to reliably get it past AMSI. Read about AMSIfail to learn more on that.

[lokich]

thanks, I'll try that out