search

oddcod3 / Phantom-Evasion

Python antivirus evasion tool
GNU General Public License v3.0
1.39k stars 334 forks source link

how do you make it undetctable #93

Open caninerhino4779 opened 2 years ago

caninerhino4779 commented 2 years ago

it is still being detected by windows 11

r4lix commented 2 years ago

and it will still be detected if u enable sample analysis to be sent or use ViruTotal to scan your build

ghost commented 2 years ago

You can't depend all your work on an open source project.

You can see the source code and use it,why can't the antivirus providers do the same thing?

Thus,the best way is writing your own trojan loader template and dynamically change the variable in your code,also you can use the junk code generator in phantom-evasion (It is located in modules/payloads/auxiliar/useful.py),besides, you need to use direct syscall to evade AV's hook.

To sum up,you have to extract the genius ideas from phantom-evasion into your own code,not just complain about this tool is out-dated.

By the way,in my real test,i can bypass kaspersky,windefender,bitdefender...... with my own code and phantom's junk code generator.

However,i wont publish my code,because it will be useless when it is open-sourced.

Do your code and be a true hacker💪💪💪. Hope you guys have a happy coding day💪💪💪.

Sincerely,W00dy