Defense Evasion with Meterpreter

Focused View

William Hardy

2:03:52

76 View

Exercise Files

defense-evasion-meterpreter.zip

Module 1 - Course Overview

1. Course Overview.mp4

01:25

Module 2 - Meterpreter Deep Dive

1. Why Learn Defense Evasion.mp4

01:44

2. Meterpreter Internals - Components.mp4

01:13

3. Meterpreter Internals - Stager.mp4

05:05

4. Meterpreter Internals - Handler.mp4

02:24

5. Meterpreter Internals - Payload.mp4

02:28

6. Meterpreter Internals - Reflective DLL Injection.mp4

04:37

7. Meterpreter Internals - Overview.mp4

01:01

8. Demo - Meterpreter Internals - Shellcode Runner.mp4

06:33

Module 3 - Antivirus and EDR

1. Antivirus and EDR Components - Overview.mp4

02:01

2. Kernel Mode Drivers.mp4

02:52

3. API Monitoring.mp4

07:22

4. ETW.mp4

02:47

5. Emulation.mp4

03:40

6. Sandboxes.mp4

03:21

7. AMSI.mp4

03:09

8. User Mode Services.mp4

00:44

9. Overview.mp4

02:26

10. Detections.mp4

01:34

Module 4 - Evading Antivirus on Disk

1. Introduction.mp4

01:18

2. Shellcode Runner.mp4

00:49

3. Msfvenom - EXE Format.mp4

03:32

4. Msfvenom - EXE ONLY Format.mp4

01:26

5. Encoders and Encryptors.mp4

05:20

6. Modifying the Stager.mp4

03:34

7. Confusing AI and ML Models.mp4

03:16

8. Demo - Writing Your Own Stager.mp4

05:17

Module 5 - Evading Antivirus Heuristics

1. Introduction.mp4

00:59

2. Evading API Monitoring.mp4

04:01

3. Anti-Emulation and Anti-Sandboxing.mp4

04:42

4. Bypassing AMSI.mp4

06:48

5. Demo - Evading Windows Defender.mp4

01:42

Module 6 - Evading Detection in Memory

1. Introduction.mp4

00:47

2. Evading in Memory Signatures.mp4

01:43

3. Demo - Evading in Memory Signatures.mp4

05:08

Module 7 - Evading Detection on the Network

1. Introduction.mp4

01:35

2. Stage Encoding.mp4

05:48

3. Tips and Tricks.mp4

03:51

4. Demo_ Evading Defender and SquidClamAV.mp4

02:23

Module 8 - Course Conclusion

1. Course Conclusion.mp4

01:35

2. Course Recap.mp4

01:52

Description

Learning Defense Evasion is a prerequisite for using Metasploit tooling successfully in a secure environment. This course will teach you how to stay under the radar and evade detection even in highly secure environments.

What You'll Learn?

The ability to evade defenses is a vital skill for anyone involved in penetration testing or red-teaming engagements in secure environments. In this course, Defense Evasion with Meterpreter, you will learn to customize your Meterpreter tooling to stay under the radar and avoid detection. First, you will explore the inner workings of Metasploit’s Meterpreter payloads and how many endpoint security tools work. Next, you will discover how to slip past signature-based detections on disk and in memory. Finally, you will learn how to defeat emulators and heuristic analysis engines as well as network-based security tools. When you are finished with this course, you will have the skills and knowledge required to conduct security assessments successfully in highly secured networks.

More details

User Reviews

Rating

average 0

Total votes0

Focused display

Penetration Testing

Windows Server

William Hardy

Instructor's Courses

Pluralsight

View courses Pluralsight

Pluralsight, LLC is an American privately held online education company that offers a variety of video training courses for software developers, IT administrators, and creative professionals through its website. Founded in 2004 by Aaron Skonnard, Keith Brown, Fritz Onion, and Bill Williams, the company has its headquarters in Farmington, Utah. As of July 2018, it uses more than 1,400 subject-matter experts as authors, and offers more than 7,000 courses in its catalog. Since first moving its courses online in 2007, the company has expanded, developing a full enterprise platform, and adding skills assessment modules.