search

shubham0d / Antivirus-Symlink-Exploit

POC for arbitary file deletion using Symlink(Symbolic links) issue present in many Antivirus software
GNU General Public License v3.0
9 stars 5 forks source link

Manual ? #1

Open Dazmed707 opened 4 years ago

Dazmed707 commented 4 years ago

How to use for bypass kaspersky AV ?

shubham0d commented 4 years ago

Hi, Sorry for late reply. The EICAR string present on code is not detected by kaspersky. So, its better to just upload a malicious dll and change echo .. to curl url.

Dazmed707 commented 4 years ago

I understand, but would like a guide on how to compile and use this project and leave a rat (.exe) on the infected system.

shubham0d commented 4 years ago

You need to compile the project using Visual studio with c++ components installed. It will give you the .exe file.