Practical Techniques for AV Bypass

Explore practical techniques for bypassing antivirus software in this comprehensive conference talk from ANYCon 2017. Delve into various scenarios and tools, including Norton Security, VMware Shared Folder, and standalone executable generation. Learn about payload creation, the Vale Framework, and programming languages like Python and C#. Discover injection techniques, naming strategies, and SSL certificate validation. Examine Meterpreter, auto-protection mechanisms, and browser-based attacks. Gain insights into Twitter handlers, macro creation, and file transfer methods. Witness demonstrations and hands-on examples to enhance your understanding of AV bypass methodologies.

Intro
Objectives
Fred Cullen
Scenarios
Norton Security
VMware Shared Folder
Generate Standalone Exe
Generate XE Payload
What can I do
Vale Framework
Python
Pi Installer
CSharp
Injection
Naming
Changing the Name
SSL Certificate Validation
CSharp Injunction
Meterpreter
Auto Protection
SSL Cert
Chrome
Shelter Brawl
Twitter Handler
Chrome Browser
Operation Mode
Mouse Over Action
Unicorn Macro
Sonar Hit
SCP File
CSCexe
Macros
Demo