In the constantly evolving landscape of cybersecurity, the ability to discreetly navigate past anti-virus (AV) and Endpoint Detection and Response (EDR) systems has become a pivotal skill for security professionals.
“BypassAV” delves into the intricate world of evading detection, offering a comprehensive map of essential techniques that prioritize manual strategies over detectable open-source tools.
This article serves as a guide to enhancing your cybersecurity measures, ensuring a deeper understanding of defense mechanisms and their vulnerabilities.
This map lists the essential techniques to bypass anti-virus and EDR.
As a reminder: it is highly recommended to read the articles related to manual techniques rather than using open source tools which are more likely to be suspected by the anti-virus because of IOSs
Bypass-AV.md is made using MarkMap. You can preview it online at matro7sh.github.io/BypassAV.
You can edit / preview it with some plugins:
The ss command in Linux lists open sockets and active network connections. It replaced the deprecated netstat command and…
The ftp command in Linux connects to a remote FTP server and transfers files. FTP transmits everything…
The lsmod command in Linux lists all currently loaded kernel modules. It reads /proc/modules — a virtual file maintained…
The rename command in Linux renames multiple files at once using Perl regular expressions. Unlike mv, which handles…
The pgrep command in Linux finds the PIDs of running processes based on a name or other…
The unlink command in Linux removes a single file by deleting its directory entry. It is a…