How to bypass AV
November 25, 2011 Chad Loeven
We came across this presentation given by Andrew King at this year’s Toorcon in San Diego and thought it was worth posting for some Thanksgiving reading. You’ll be able to follow along just fine if, like Andrew, you believe building polymorphic encoders inside a DLL housing is “not that complicated”. For the rest of us, you’ll get the idea anyway of how targeted attacks can be built with methodologies like this and achieve AV bypass with virtual certainty against most if not all the major vendors.
My talk at ToorCon San Diego 2011 from Andrew King on Vimeo.
