How To Bypass Windows Defender with Nim Reverse Shell

Рет қаралды 4,445

11 ай бұрын

Is it possible to bypass windows defender and elastic security at the same time with a nim written reverse shell?
The best purple teaming series on youtube with real hands on learning for everyone!
For educational purposes only!
Subscribe and like for more!
Connect with me on linkedin: / howard-mukanda-24503144
Follow me on twitter: / lahilabs
A simple reverse shell written in Nim that bypasses Windows Defender detection, find it here: github.com/Sn1r/Nim-Reverse-S... Connect and Direct Message me on Linkedin: / howard-mukanda-24503144

Пікірлер: 25

@tonyfernandes216 10 ай бұрын

brilliant work mate, love to see more video about windows defender bypass and threat hunting in Elastic search, Wazu.

@ITSecurityLabs 10 ай бұрын

Thank you. This is fun stuff

@Ydt-cd8xw 3 ай бұрын

mate this was exactly what i was looking for. thank you!!!

@neon_Nomad 11 ай бұрын

Exactly why i use simple wall

@aviwemusa6109 3 ай бұрын

How to implement this if my target is my remote (EC2 instance), do I put my Internet public IP on V1 since my Kali is within VMware on my Ubuntu?

@station0x 8 ай бұрын

how to setup elastic with defender? can u plz tell me

@fokyewtoob8835 10 ай бұрын

Dope content man. Actually makes me open to trying out blue even though I’m red for life

@user-ru7qk6ui4u 8 ай бұрын

I've seen some malware written in D. Languages such as Carbon, Zig, Haxe can be used. Could an AI help in these cases of detecting unconventional codes?

@gregandark8571 7 ай бұрын

no.

@anonymousperson45152 10 ай бұрын

nice vid bro

@ITSecurityLabs 10 ай бұрын

Thank you

@anonymousperson45152 10 ай бұрын

@@ITSecurityLabs it is still working btw

@user-kn2dp2rq9k 7 ай бұрын

it says *ssh: connect to host 192.168.. port 22: Connection refused* when i try to put my pacupdate on my windows desktop

@ITSecurityLabs 7 ай бұрын

You need to enable ssh on kali for your user. SSH is not enabled for root by default

@RaGhav363 8 ай бұрын

Don't close any function of Microsoft defender. And add some AVs IDS firewall on top of it and then bypass it

@hiddengo3232 11 ай бұрын

how to bypass edr

@umarmukthar1965 10 ай бұрын

powershell not working ?

@ITSecurityLabs 10 ай бұрын

No, powershell still works!

@umarmukthar1965 10 ай бұрын

@@ITSecurityLabs bro stable powershell connection any tools bypass in windows defender

@umarmukthar1965 10 ай бұрын

@@ITSecurityLabs but this tool working 💯

@RaGhav363 8 ай бұрын

This is of no use I tell you that. Because he disabled half of the windows difender functions

@ITSecurityLabs 8 ай бұрын

Please tell me more. You mean disabling automatic sample submission? Because that’s all I disabled. Maybe you mean since it’s not domain joined and I have no app locker rules and powershell is not constrained? I genuinely want to know what you mean. I am learning as well and if there is a better way, I want that