BypassAV

BypassAV このマップは、アンチウイルスとEDRをバイパスするための必須テクニックを列挙しています。 注意: IOSsによりアンチウイルスに疑われる可能性が高いオープンソースツールを使用するのではなく、手動テクニックに関する記事を読むことを強くお勧めします。 プレビュー Markdown / HTML版の編集 Bypass-AV.md は MarkMap で作成されています。 ここでプレビューできます。 いくつかのプラグインで編集/プレビューできます: VSCode VSCode Marketplace - gera2ld.markmap-vscode Open VSX -...

Shellcode-Encryptor

셸코드 암호화기 바이러스 백신을 우회하기 위한 간단한 셸 코드 암호화/복호화/실행기입니다. 참고: 워크플로우를 완전히 재구성했습니다. 파워셸을 사용하여 메모리에 바이너리를 주입하는 것이 가장 효과적인 방법임을 발견했습니다. 목적 .Net 바이너리를 생성하여 base64로 인코딩되고 AES로 암호화된 셸코드를 포함하며, Windows 대상에서 실행되어 바이러스 백신을 우회합니다. 사용 방법 meterpreterencryptor.py를 사용하여 암호화된 base64 셸코드를 생성합니다: root@kitploit: root@kali...

Veil

Veil Veil Logo Veil은 일반적인 안티바이러스 솔루션을 우회하는 metasploit 페이로드를 생성하도록 설계된 도구입니다. Veil은 현재 @ChrisTruncer가 지원하고 있습니다. 소프트웨어 요구사항: 다음 OS가 공식적으로 지원됩니다. Debian 8+ Kali Linux Rolling 2018.1+ 다음 OS에서 Veil을 실행할 수 있을 가능성이 높습니다: Arch Linux Manjaro Linux BlackArch Linux Deepin 15+ Elementary Fedora 22+ Linux Mi...

EUVD-2000-0477

Malware in sbrugna...

EUVD-2005-3057

Malware in sbrugna...

CVE-2021-26718

KIS for macOS in some use cases was vulnerable to AV bypass that potentially allowed an attacker to disable anti-virus protection...

Bluffy - Convert Shellcode Into Different Formats!

Bluffy is a utility which was used in experiments to bypass Anti-Virus products statically by formatting shellcode into realistic looking data formats. Proof-of-concept tools, such as 0xBoku's NinjaUUIDRunner and ChoiSG's UuidShellcodeExec, inspired the initial concept for Bluffy. So far, we...

Shellcode-Encryptor - A Simple Shell Code Encryptor/Decryptor/Executor To Bypass Anti Virus

A simple shell code encryptor/decryptor/executor to bypass anti virus. Note: I have completely redone the work flow for creating the bypass, I have found injecting the binary into memory using PowerShell as the most effective method. Purpose To generate a .Net binary containing base64 encoded, AE...

CVE-2021-26718

KIS for macOS in some use cases was vulnerable to AV bypass that potentially allowed an attacker to disable anti-virus protection...

Code injection

KIS for macOS in some use cases was vulnerable to AV bypass that potentially allowed an attacker to disable anti-virus protection...

CVE-2020-9264

ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro macOS, Cyber Security macOS, Mobile Security for...

Metasploit Cheat Sheet

The Metasploit Project is a computer security project that provides information on vulnerabilities, helping in the development of penetration tests and IDS signatures. Metasploit is a popular tool used by pentest experts. Metasploit : Search for module: msf search regex Specify and exploit to use...

OWASP ZSC - Shellcode/Obfuscate Code Generator

OWASP ZSC is an open source software in Python language which lets you generate customized shellcodes and convert scripts to an obfuscated script. This software can be run on Windows/Linux/OSX under Python. Usage of shellcodes Shellcodes are small codes in Assembly language which could be used as...

Fully Undetectable Backdoor generator for Metasploit

Fully Undetectable Backdoor generator for Metasploit Security Labs Experts from Indian launch an automated Anti-Virus and Firewall Bypass Script. Its an Modified and Stable Version in order to work with Backtrack 5 distro. Below you can find the modified version and a simple presentation on how i...

Fully Undetectable Backdoor generator for Metasploit

Fully Undetectable Backdoor generator for Metasploit Security Labs Experts from Indian launch an automated Anti-Virus and Firewall Bypass Script. Its an Modified and Stable Version in order to work with Backtrack 5 distro. Below you can find the modified version and a simple presentation on how i...

CVE-2005-3226

Multiple interpretation error in unspecified versions of ArcaVir Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...

CVE-2005-3217

Multiple interpretation error in unspecified versions of Symantec Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, eve...

CVE-2005-3213

Multiple interpretation error in unspecified versions of F-Prot Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...

CVE-2005-1551

Sophos Anti-Virus 3.93 does not check downloaded files for viruses when they have only been written, which creates a race condition and may allow remote attackers to bypass virus protection if the file is executed before the antivirus starts on system reboot...

CVE-2002-1774

NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to send viruses that bypass the e-mail scanning via a NULL character in the MIME header before the virus. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is...