besimorhino / powercat

netshell features all in version 2 powershell
Apache License 2.0
2.15k stars 473 forks source link

IEX install with antivirus warning #28

Closed vic-t closed 8 months ago

vic-t commented 1 year ago

When trying to install PowerCat directly using invoke-expression (IEX), I get the following error in Powershell 7:

Invoke-Expression: This script contains malicious content and has been blocked by your antivirus software.

I'm on Windows 10 with built-in Windows Defender.

sunnystew222 commented 9 months ago

That's a problem with this tool, even the netcat for windows thingy gets flagged too. Just ignore it.

besimorhino commented 8 months ago

Evading AV and other endpoint controls is not something this project is attempting to do.

There are "things" you can do with the code to better evade detection logic.

Sorry to be vague, but you're on your own.