OP 16 July, 2020 - 04:51 PM
This isn't meant to be a drop-in, undetectable, malicious, weaponized shell ;) , 2020 new tool
EDR / AV evasion
DON'T LEACH , GIVE LIKES
EDR / AV evasion
- Uses a service that is not commonly known and not monitored or flagged as suspicious by EDR vendors.
- Uses the Windows thread pool API to do setup, making stacks harder to read, offloading work through multiple threads, and avoiding easy "hints" that something suspicious is happening.
DON'T LEACH , GIVE LIKES