Is anyone willing to share techniques for creating a Windows Meterpreter payload that can bypass AV? I've noticed that Defender does a very good job these days at detecting it. Some of the techniques I've used and will share here. The particular method I'm trying to use is creating an executable Meterpreter payload using msfvenom. Transferring it to Windows 10, and then on msfconsole running exploit/multi/handler with reverse shell stager. Double-click on Windows and establish meterpreter.
I've tried:
- Used msfvenom with Shikata Ga Nai encoder. Detected.
- Created a Python Meterpreter payload. Not Detected. However, doesn't have the same functionality as Windows meterpreter payload.
- Tried using Golang with meterpreter payload created with msfvenom, and upx. Not detected, but exe has an exception.