Chapter 4: Bypassing the Dynamic Engine
In this chapter, you will learn the basics of bypassing the dynamic engine of an antivirus software.
We will learn how to use VirusTotal and other antivirus engine detection platforms to identify which antivirus software we managed to bypass. Furthermore, we will go through understanding and implementing different antivirus bypass techniques that can be used to potentially bypass antivirus engines, such as process injection, the use of a dynamic-link library (DLL), and timing-based techniques to bypass most of the antivirus software out there.
In this chapter, you will achieve an understanding of practical techniques to bypass antivirus software, and we will explore the following topics:
- The preparation
- VirusTotal
- Antivirus bypass using process injection
- Antivirus bypass using a DLL
- Antivirus bypass using timing-based techniques