Статья bypass all antiviruses/EDRs Like RockStar, create your own clean undetectable cobalt strike beacon, backdoor, trojan Part 1

[Rembo007]

этот метод с аваст не работает. может кто-нибудь подскажет другой способ?

 

[T1Crazy]

The things that I have created I mentioned in tutorial that I have created the other things I didn't mention anything and there's nothing to worry about mrs.Detective

Instead of mocking people and ruining their work why don't you share something and help the others ???? That's really ridiculous

He just wants attention let him

 

[Th30C0der]

Thanks for sharing , but unhooking full ntdll why ?! we can unhook the function we are going to use like NtWriteVirtualMemory , besides this does not work any more new AV/EDR can hook on kernel call backs not only from userland

 

[Gwuzciq]

Informative article. Thank you

 

[stalkerDz]

Thnks for the explanation.. Well done

 

[xmarina]

As many have pointed our before me these are some of the most basic evasion methods.

The code is copy pasted from github and ired.team. Its hardly anything special, highly doubt it will get past EDR.

 

[Evild34d]

Great article! thanks to your effort man