Chapter 8: Antivirus Evasion and Anti-Forensics
In the previous two chapters, you learned how to leverage the Metasploit Framework to generate custom payloads and launch advanced client-side attacks. However, the payloads that we generate will be of no use if they get detected and blocked by antivirus programs. In this chapter, we'll explore the various techniques to employ in order to make our payloads as undetectable as possible. You will also become familiar with various techniques to cover our tracks after a successful compromise.
In this chapter, we will cover the following topics:
- Using encoders to avoid antivirus detection
- Using the new evasion module
- Using packagers and encrypters
- Understanding what a sandbox is
- Using Metasploit for anti-forensics
