Quest for Virus Total Evasion

Generating a msfvenom payload for use on HackTheBox or TryHackMe is effective provided Defender or other Anti-Virus software is not running on the target. However, what if this is a real work engagement and you need to sneak a payload past some EDR solution?

I will begin to explore some different ways in which we as Offensive Security practitioners can drop our Anti-Virus detection rates. This first iteration will be rather simple, utilizing a fantastic Git Hub repository. However, in the future as we cover more techniques, we will have the option to chain them together for even lower rates of detection. Despite this payload being detected, it hits at a vastly lower rates which sometimes can be all you need.

Installing

Start by browsing to this Git Repository:

GitHub - oddcod3/Phantom-Evasion: Python antivirus evasion tool

Clone the repository with:

git clone https://github.com/oddcod3/Phantom-Evasion.git

The only thing left to do once cloning the repository is to run this command which will take care of all your set up needs: