From 43d8b3bcbdb2f92bd827f7abcfdeed40d180b2ea Mon Sep 17 00:00:00 2001 From: pe3zx Date: Mon, 21 Dec 2020 14:11:26 +0700 Subject: [PATCH] Add BinaryScary/NET-Obfuscate to Defense Evasion --- Offensive.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Offensive.md b/Offensive.md index 149611e..a0416c9 100644 --- a/Offensive.md +++ b/Offensive.md @@ -474,6 +474,10 @@ Some tools can be categorized in more than one category. But because the current bats3c/Ghost-In-The-Logs Evade sysmon and windows event logginEvade sysmon and windows event loggingg + + BinaryScary/NET-Obfuscate + Obfuscate ECMA CIL (.NET IL) assemblies to evade Windows Defender AMSI + bhumic/PErmutator The goal of this project is to create a permutation engine for PE files. The engine should randomize the executable parts of the file.