search

tiagorlampert / CHAOS

:fire: CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.
MIT License
2.33k stars 510 forks source link

AV bypass #64

Open tehseensagar opened 3 years ago

tehseensagar commented 3 years ago

Greetings to all,

I found this tool really good for my red teaming . I wonder if there is any way to evade av so that it can bypass. I will appreciate if you can help in this regards

Regards

PaulDotSH commented 2 years ago

AV "bypasses" aren't open source since they would get patched, what you are looking for is a crypter, you could either code one yourself or buy a subscription

BurntDog commented 2 years ago

Quick and dirty ways are using software packers (hit and miss) sometimes it will work and others times not, trial and error. Also old school Hex editing also can be helpful. Always retest your client cause a lot of times the code gets so scrambled it will no longer work.