Using encoders to avoid antivirus detection
In Chapter 6, Client-Side Attacks with Metasploit, we saw how to use the msfvenom utility to generate various payloads. However, if these payloads are used as is, they will most likely be detected by antivirus programs. In order to avoid antivirus detection of our payload, we need to use encoders offered by the msfvenom utility.
To get started, we'll generate a simple payload in Remove the .exe format using the shikata_ga_nai encoder, as demonstrated in the following screenshot:
Figure 8.1 – Generating a payload using 'msfvenom'
Once the payload has been generated, we upload it to htttp://www.virustotal.com for analysis.
Important Note:
The site http://www.virustotal.com runs multiple antivirus programs from across various vendors and scans the uploaded file with all the available antivirus programs.
When the analysis is completed, we can see that our file, apache-update.exe...
