Meterpreter Internals - Components

Why Learn Defense Evasion

Meterpreter Internals - Payload

Meterpreter Internals - Stager

Meterpreter Internals - Overview

Meterpreter Internals - Reflective DLL Injection

Demo Meterpreter Internals - Shellcode Runner

Course Overview

Antivirus and EDR Components - Overview

Kernel Mode Drivers

Emulation

Sandboxes

ETW

API Monitoring

AMSI

Detections

Overview

User Mode Services

Introduction

Shellcode Runner

Msfvenom - EXE Format

Msfvenom - EXE ONLY Format

Modifying the Stager

Encoders and Encryptors

Confusing AI and ML Models

Demo Writing Your Own Stager

Introduction

Evading API Monitoring

Anti-Emulation and Anti-Sandboxing

Bypassing AMSI

Demo Evading Windows Defender

Introduction

Evading in Memory Signatures

Demo Evading in Memory Signatures

Introduction

Tips and Tricks

Demo Evading Defender and SquidClamAV

Stage Encoding

Course Recap

Course Conclusion