As I got from english words, you want to do reverse shell on a machine
with Kaspersky AV installed. Kaspersky installs kernel hooks on
NTCreateprocessEx and NTCreateProcess and detects redirected input/
output for the processes. Even using a socket instead of a pipe wont
help. You should implement a custom reverse shell that sends output to
a temp file and submits to the remote side or fix kaspersky hooks ;)
with Kaspersky AV installed. Kaspersky installs kernel hooks on
NTCreateprocessEx and NTCreateProcess and detects redirected input/
output for the processes. Even using a socket instead of a pipe wont
help. You should implement a custom reverse shell that sends output to
a temp file and submits to the remote side or fix kaspersky hooks ;)
1万+
扫一扫
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
