https://github.com/damonmohammadbagher/meterpreter_payload_detection
Meterpreter_Payload_Detection.exe tool for detecting Meterpreter in memory like IPS-IDS and Forensics tool
https://github.com/damonmohammadbagher/meterpreter_payload_detection
etw etw-monitoring-threads etwmonthread meterpreter meterpreter-detection meterpreter-payload-detection meterpreter-signature mpd signature thread-injection thread-injection-detection
Last synced: about 1 year ago
JSON representation
Meterpreter_Payload_Detection.exe tool for detecting Meterpreter in memory like IPS-IDS and Forensics tool
- Host: GitHub
- URL: https://github.com/damonmohammadbagher/meterpreter_payload_detection
- Owner: DamonMohammadbagher
- Created: 2016-12-03T03:49:41.000Z (over 9 years ago)
- Default Branch: master
- Last Pushed: 2023-06-05T13:45:45.000Z (almost 3 years ago)
- Last Synced: 2025-03-31T15:33:40.898Z (about 1 year ago)
- Topics: etw, etw-monitoring-threads, etwmonthread, meterpreter, meterpreter-detection, meterpreter-payload-detection, meterpreter-signature, mpd, signature, thread-injection, thread-injection-detection
- Language: C#
- Homepage:
- Size: 2.37 MB
- Stars: 161
- Watchers: 12
- Forks: 63
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
- awesome-forensics - **113**星 - IDS and Forensics tool (<a id="ecb63dfb62722feb6d43a9506515b4e3"></a>新添加)
README
# MPD Meterpreter_Payload_Detection.exe Tool
C# code Author : Damon Mohammadbagher
Meterpreter Signature Authors : Rohan Vazarkar, David Bitner
Note : some API programming and Meterpreter Signature Created by these guys Rohan Vazarkar, David Bitner , not by me .
i just made console version of code by C# and develop this Code by some API Functions.
Please don't ask me about Signature and Source code.
but i hope my application was useful for you all guys and i hope you all help me to make better versions for this code in future.
thank you all .
Note : IPS Mode required RunAs Administrators
if you getting error , use command with one argument
syntax : Meterpreter_Payload_Detection.exe IPS
syntax : Meterpreter_Payload_Detection.exe IDS
syntax : Meterpreter_Payload_Detection.exe Blobblob
Video Published by Damon Mohammadbagher (bbxc9x00x1f)
Video for Meterpreter_Payload_Detection.exe Tool
Video 1 : https://youtu.be/Ka9c_d3sR_k
Bypassing AVs with NativePayload_DNS and Meterpreter_Payload_Detection
Video 2 : https://youtu.be/ngZl4PSfW6o
Video Description: Bypassing AVs with NativePayload_DNS.exe and Detecting Meterpreter Process by Meterpreter_Payload_Detection tool
step by step and for more information Please visit this link:
Detecting Meterpreter Undetectable Payloads by Scanning Memory
https://www.linkedin.com/pulse/detecting-meterpreter-undetectable-payloads-scanning-mohammadbagher?trk=pulse_spock-articles
Related Links :
Bypass all anti-viruses by Encrypted Payloads with C#
https://www.linkedin.com/pulse/bypass-all-anti-viruses-encrypted-payloads-c-damon-mohammadbagher?trk=pulse_spock-articles
### ETWMonThread
Download Link => https://github.com/DamonMohammadbagher/Meterpreter_Payload_Detection/tree/master/MPD/ETWMonThread
