Is there a way to obfuscate an existing .exe file?
I'm in a situation where I cannot transfer the
winPEAS.exe file (for PrivEsc purposes) on a Win10 machine because of the AV blocking the executable.
Any other solution will be appreciated.
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
There are readily made obfuscated winPEAS executables released by Carlos Polop.
If those are detected and blocked by AV as well, I would suggest firing up a SMB server and execute your winPEAS from there. I'm pretty sure the AV will not detect it.
Also, you can try in-memory execution of winPEAS batch via PowerShell. This way, you will not be writing winPEAS to the disk. There might be a chance AV does not detect it
If all else fails, perhaps you might want to read into what winPEAS does and perform manual enumerations yourself.