Throughout this chapter, we learned AV evasion techniques using custom encoders, we bypassed the signature matching of IDS systems, and we also avoided Windows firewall blocked ports using the all-TCP-ports Meterpreter payload.
You can try the following exercises to enhance your evasion skills:
- Try delaying execution of the payload without using sleep() function in the decoder and analyze the detection ratio change
- Try using other logical operations such as NOT, double XOR, and use simple ciphers such as ROT with the payloads
- Bypass at least 3 signatures from Snort and get them fixed
- Learn and use SSH tunneling for bypassing firewalls
The next chapter relies heavily on these techniques and takes a deep dive into Metasploit.
