What are the best RATs and FUD methods today

I used to play a lot with spywares such as Turkojan, SpyNet, DarkDDoSer, and others a long time ago (2011~2014), and I also used to make my own crypters with VB6 and AutoIT to make them fully undetectable. Back in that time I remember it was very easy to bypass the most common AVs, but I think now security mechanisms evolved in such a level that these old methods don't work anymore (just guessing, idk). I wanted to know from you guys what similar free RATs are the bests today (features, flexibility, reliability, etc.) and what methods for bypassing anti virus are more used. What do you normally use and why? Thx.

No, not really. AI in cybersecurity will solve this issue but it is still not solve-able and still AVs use just hashes of function calls to detect viruses. RATs are soykafty and I suggest either copying some free open source RATs or just writting your own since it's good practice and pretty simple. What you need is some kind of shell accessibility, direct communication to command and control server, additionally you would want virii to be able to run other scripts and exe files you send to it, uploading of files and screen capture and webcam capture. Other than that, there is no more things, but even those things can be reduced to just: >reverse shell because essentially that's all it is. FUD crypters aren't that hard either, just something to hold an encrypted virus in it's memory whilst AV securely "reads it" to make sure the memory allocation holds no hashes of functions that are "bad"

>No, not really. AI in cybersecurity will solve this issue but it is still not solve-able and still AVs use just hashes of function calls to detect viruses. I doubt it, AI is already reached it's tipping point after every tech company threw it's scitzo chatbot in their software for a quick stock boost. >RATs are soykafty and I suggest either copying some free open source RATs or just writting your own since it's good practice and pretty simple. What you need is some kind of shell accessibility, direct communication to command and control server, additionally you would want virii to be able to run other scripts and exe files you send to it, uploading of files and screen capture and webcam capture. I'd go even less effort, I'd export the meterpeter shell from metasploit and change it's template code. ired is a good source on this https://www.ired.team/offensive-security/defense-evasion/av-bypass-with-metasploit-templates

>>22508 >I doubt it who are you? Why should I take your doubt with any relevance? I worked in AI cybersecurity company that was cutting edge and in all honesty they were able to detect novel hacker attacks (just with network data) with real world examples and small false positives. AI still didn't have its full potential unleashed since most of it has been already premade solutions of AI, AI use in cybersecurity still hasn't be fully utilized. >I'd go even less effort, I'd export the meterpeter shell from metasploit and change it's template code. What's the fun in that? Goal seeking instead of knowledge seeking is worthless.

>>22510 >who are you? Why should I take your doubt with any relevance? Just some soykaf poster. Do what you want. >I worked in AI cybersecurity company that was cutting edge and in all honesty they were able to detect novel hacker attacks (just with network data) with real world examples and small false positives. unless your working with something unreleased, but as the currently released AI and corpo AI product "showing" including other AI defensive tools barely do better than L1 soc analysts. Companies want a easy install fix, not hire people to build and fix the root network problems. Maybe in a highly configured well monitored network AI can do well. However, a good chunk of companies still struggle with basic Active directory security. >What's the fun in that? Goal seeking instead of knowledge seeking is worthless. you get more useful knowledge figuring out how to manually doing av-bypass a well known effective post exploitation payload than running a FUD crypter with a copypaste rat. Also, you get knowledge by setting a goal than figuring out the solutions to that goal. rinse and repeat >AI use in cybersecurity still hasn't be fully utilized. True, but we are seening the limits of AI in other fields with chatgpt being comically wrong about obvious things, and when coding usually has tons of bugs and vulns. Maybe AI will do the impossible, but I know in tech, people often overstate and under deliver.