CHAOS icon indicating copy to clipboard operation
CHAOS copied to clipboard

AV bypass

Open tehseensagar opened this issue 4 years ago • 2 comments

Greetings to all,

I found this tool really good for my red teaming . I wonder if there is any way to evade av so that it can bypass. I will appreciate if you can help in this regards

Regards

tehseensagar avatar Sep 20 '21 17:09 tehseensagar

AV "bypasses" aren't open source since they would get patched, what you are looking for is a crypter, you could either code one yourself or buy a subscription

PaulDotSH avatar Feb 02 '22 10:02 PaulDotSH

Quick and dirty ways are using software packers (hit and miss) sometimes it will work and others times not, trial and error. Also old school Hex editing also can be helpful. Always retest your client cause a lot of times the code gets so scrambled it will no longer work.

BurntDog avatar Feb 02 '22 18:02 BurntDog