rosesecurity/anti-virus-evading-payloads

During the exploitation phase of a pen test or ethical hacking engagement, you will ultimately need to try to cause code to run on target system computers. Whether accomplished by phishing emails, delivering a payload through an exploit, or social engineering, running code on target computers is part of most penetration tests. That means that you will need to be able to bypass antivirus software or other host-based protection for successful exploitation. The most effective way to avoid antivirus detection on your target's computers is to create your own customized backdoor. Here is a simple way to evade anti-virus software when creating backdoors!

---

Important

Hey, I'm RoseSecurity!

My journey into the world of computing began as a cybersecurity network operator, where I developed intrusion detection systems to protect critical infrastructure, automated Blue Team vulnerability assessments, and even ventured into the Red Team space as an offensive operator and infrastructure engineer. It was during this time that I discovered my passion for building secure, scalable, and reliable cloud environments! Currently, I write Infrastructure-as-Code and automation to help startups and established companies quickly and securely build their cloud environments, but when I'm not building cloud networks, you can catch me conducting security research to identify modern tactics, techniques, and procedures used by malicious actors. If you enjoy my code, blogs, or tools, feel free to reach out and connect!

---

• Infrastructure Essentials Part 1: A Terraform Recipe for Success
• Upgrading GitLab CI/CD Authentication: Migrating to OIDC for Google Cloud
• Crafting Malicious Pluggable Authentication Modules for Persistence, Privilege Escalation, and Lateral Movement
• Boost Your Productivity with Terraform Autocompletion in Vim
• Leveraging GitHub Actions for Automated Active Reconnaissance

anti-virus-evading-payloads's Issues

AV

Image

Access Violation Exception

Got this exception

  File "payload.py", line 6, in <module>
    shell()
WindowsError: exception: access violation writing 0x000000000XXXXYYY

Detection