Metasploit Fun

A series of blog posts from BHIS.

https://www.blackhillsinfosec.com/three-simple-disguises-for-evading-antivirus/
https://www.blackhillsinfosec.com/how-to-bypass-application-whitelisting-av/
https://www.blackhillsinfosec.com/click-to-enable-content/
https://www.blackhillsinfosec.com/modifying-metasploit-x64-template-for-av-evasion/

Some fun lately with custom payloads

Doing some testing on new AV. Been reading a lot about custom payloads. I now many of these are old, but the ideas may still be new to others.
Here are some of the more recent reads ......


http://e-spohn.com/blog/2012/08/02/pe-crypters-hyperion/

https://www.christophertruncer.com/bypass-antivirus-with-meterpreter-as-the-payload-hyperion-fun/

http://www.exploit-monday.com/2011/11/powersyringe-powershell-based-codedll.html

http://colesec.inventedtheinternet.com/obfuscating-meterpreter-payloads-with-veil/

http://colesec.inventedtheinternet.com/hacking-with-powershell-powersploit-and-invoke-shellcode/

https://github.com/rapid7/metasploit-framework/wiki/How-payloads-work

https://www.citadelo.com/en/how-we-bypassed-nod32-and-hacked-a-paranoid-customer-2/