https://github.com/Jhangju/bypass-sandbox-antivirus-detection-using-human-interaction-technique-by-cheking-mouse-movement

This project actually checks for the mouse movement if reach to 100 pixel it will start cmd and open cmd.exe and chrome.exe. Just to give idea that some sandbox does not use mouse movements.
https://github.com/Jhangju/bypass-sandbox-antivirus-detection-using-human-interaction-technique-by-cheking-mouse-movement

bypass-antivirus bypass-sandbox mouse-movements

Last synced: 22 days ago
JSON representation

This project actually checks for the mouse movement if reach to 100 pixel it will start cmd and open cmd.exe and chrome.exe. Just to give idea that some sandbox does not use mouse movements.

• Host: GitHub
• URL: https://github.com/Jhangju/bypass-sandbox-antivirus-detection-using-human-interaction-technique-by-cheking-mouse-movement
• Owner: Jhangju
• Created: 2021-06-18T06:31:36.000Z (over 3 years ago)
• Default Branch: main
• Last Pushed: 2021-06-18T06:39:31.000Z (over 3 years ago)
• Last Synced: 2024-08-05T17:26:09.084Z (4 months ago)
• Topics: bypass-antivirus, bypass-sandbox, mouse-movements
• Language: C#
• Homepage:
• Size: 13.7 KB
• Stars: 7
• Watchers: 1
• Forks: 2
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - Jhangju/bypass-sandbox-antivirus-detection-using-human-interaction-technique-by-cheking-mouse-movement - This project actually checks for the mouse movement if reach to 100 pixel it will start cmd and open cmd.exe and chrome.exe. Just to give idea that some sandbox does not use mouse movements. (C# #)

README

        
# bypass-sandbox-antivirus-detection-using-human-interaction-technique-by-cheking-mouse-movement in c#

This project actually checks for the mouse movement if reach to 100 pixel it will start cmd and open cmd.exe and chrome.exe. Just to give idea that some sandbox does not use mouse movements.

so this project is very simple and basic. It use mouse coordinates to detects mouse movement and then it also checks if 100pexels reach it will try to start some activity, you can start your payload or trojan when this condition reaches. It will strart cmd.exe and cheome.exe just to see potential of this technique.