3 ms·
It’s my understanding that most proper red teams and hacking groups have their own custom payloads that generally won’t be detected by AV. Surely any open sourc
by noodlesUK 7y ago
It’s my understanding that most proper red teams and hacking groups have their own custom payloads that generally won’t be detected by AV. Surely any open source malware will be easily detectable...?
Additionally, I’ve never understood how packers don’t get detected by AV. Normal software isn’t typically extremely high entropy, is it?
- 3fe9a03ccd14ca5 7y agoA python script seems especially easy to detect with this method, as opposed to a binary.
- danesparza 7y agoI would suspect this would get lost in the noise on a software developer's machine. The developer's machine could be targeted by the red team because of this (and because of a developer's normally elevated privileges and varying network activity)