C# code Author : Damon Mohammadbagher
Meterpreter Signature Authors : Rohan Vazarkar, David Bitner
Note : some API programming and Meterpreter Signature Created by these guys Rohan Vazarkar, David Bitner , not by me .
i just made console version of code by C# and develop this Code by some API Functions.
Please don't ask me about Signature and Source code.
but i hope my application was useful for you all guys and i hope you all help me to make better versions for this code in future.
thank you all .
Note : IPS Mode required RunAs Administrators
if you getting error , use command with one argument
syntax : Meterpreter_Payload_Detection.exe IPS
syntax : Meterpreter_Payload_Detection.exe IDS
syntax : Meterpreter_Payload_Detection.exe Blobblob
Video Published by Damon Mohammadbagher (bbxc9x00x1f)
Video for Meterpreter_Payload_Detection.exe Tool
Video 1 : https://youtu.be/Ka9c_d3sR_k
Bypassing AVs with NativePayload_DNS and Meterpreter_Payload_Detection
Video 2 : https://youtu.be/ngZl4PSfW6o
Video Description: Bypassing AVs with NativePayload_DNS.exe and Detecting Meterpreter Process by Meterpreter_Payload_Detection tool
step by step and for more information Please visit this link:
Detecting Meterpreter Undetectable Payloads by Scanning Memory https://www.linkedin.com/pulse/detecting-meterpreter-undetectable-payloads-scanning-mohammadbagher?trk=pulse_spock-articles
Related Links :
Bypass all anti-viruses by Encrypted Payloads with C# https://www.linkedin.com/pulse/bypass-all-anti-viruses-encrypted-payloads-c-damon-mohammadbagher?trk=pulse_spock-articles
Download Link => https://github.com/DamonMohammadbagher/Meterpreter_Payload_Detection/tree/master/MPD/ETWMonThread
