Hey Folks, today we are going to discuss over the same topic over which we had discuss in our previous article called “how to bypass windows 10 defender” but in this tutorial, we will use different tool called “Phantom-Evasion”. Phantom-Evasion is an antivirus evasion tool written in python (both compatible with python and python3) capable to generate (almost) fully undetectable executable even with the most common x86 msfvenom payload.

Let’s take a look 😛 !!

Installation

It is very easy to install and configure this tool. First we will download this tool using git command. After the download is complete we will go inside the downloaded file, allow executable permission and execute the last command to establish dependencies.

That’s it 😛 !! The tool has been successfully configured even you can check all the features and usage guide using the help command.

CLI Version ( Recommended )

If you really want to defeat windows 10 defender, we recommend you to use the CLI version of this tool without any doubt. Just change the IP address, port number, and payload name from the following command according to you. Execute it 🙂 !!

Done 😛 !! If the payload is ready to share the victim, then start the python file sharing service using the following command.

Proof

You can see that the victim has enabled window defender protection to protect themselves against viruses or trojans.

Bypassed

OMG 😛 !! It is surprising to see that the payload is completely unrecognizable by windows 10 defender. No security warning pops up even when the victim clicks on the payload. Really it completely true “Fully Undetectable Payload“.

Wondering 😛 !! As soon as the victim clicks on the application to setup it, we have that user’s meterpreter session.

Wait 😛 !! In addition, you can use this interface to manage it and create a full undetectable payload.

Results : We would highly recommend you to use this tool to bypass window 10 defender.

About the Author
Shubham Goyal Certified Ethical Hacker, information security analyst, penetration tester and researcher. Can be Contact on Linkedin.

2 thoughts on “Phantom Evasion – Create Windows 10 FUD Payload”

  1. This is quite a bit flawed, when I try to launch the payload it says “This following program is a virus or includes potential unwanted software”. It sort of works because it does bypass the windows antivirus but not 100%. The Windows system is heavily protected.

Leave a Reply