https://github.com/damonmohammadbagher/meterpreter_payload_detection
Meterpreter_Payload_Detection.exe tool for detecting Meterpreter in memory like IPS-IDS and Forensics tool
https://github.com/damonmohammadbagher/meterpreter_payload_detection
etw etw-monitoring-threads etwmonthread meterpreter meterpreter-detection meterpreter-payload-detection meterpreter-signature mpd signature thread-injection thread-injection-detection
Last synced: 5 months ago
JSON representation
Meterpreter_Payload_Detection.exe tool for detecting Meterpreter in memory like IPS-IDS and Forensics tool
- Host: GitHub
- URL: https://github.com/damonmohammadbagher/meterpreter_payload_detection
- Owner: DamonMohammadbagher
- Created: 2016-12-03T03:49:41.000Z (almost 9 years ago)
- Default Branch: master
- Last Pushed: 2023-06-05T13:45:45.000Z (over 2 years ago)
- Last Synced: 2025-03-31T15:33:40.898Z (6 months ago)
- Topics: etw, etw-monitoring-threads, etwmonthread, meterpreter, meterpreter-detection, meterpreter-payload-detection, meterpreter-signature, mpd, signature, thread-injection, thread-injection-detection
- Language: C#
- Homepage:
- Size: 2.37 MB
- Stars: 161
- Watchers: 12
- Forks: 63
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# MPD Meterpreter_Payload_Detection.exe Tool
C# code Author : Damon Mohammadbagher
Meterpreter Signature Authors : Rohan Vazarkar, David Bitner
Note : some API programming and Meterpreter Signature Created by these guys Rohan Vazarkar, David Bitner , not by me .
i just made console version of code by C# and develop this Code by some API Functions.
Please don't ask me about Signature and Source code.
but i hope my application was useful for you all guys and i hope you all help me to make better versions for this code in future.
thank you all .
Note : IPS Mode required RunAs Administrators
if you getting error , use command with one argument
syntax : Meterpreter_Payload_Detection.exe IPS
syntax : Meterpreter_Payload_Detection.exe IDS
syntax : Meterpreter_Payload_Detection.exe Blobblob
Video Published by Damon Mohammadbagher (bbxc9x00x1f)
Video for Meterpreter_Payload_Detection.exe Tool
Video 1 : https://youtu.be/Ka9c_d3sR_k
Bypassing AVs with NativePayload_DNS and Meterpreter_Payload_Detection
Video 2 : https://youtu.be/ngZl4PSfW6o
Video Description: Bypassing AVs with NativePayload_DNS.exe and Detecting Meterpreter Process by Meterpreter_Payload_Detection tool
step by step and for more information Please visit this link:
Detecting Meterpreter Undetectable Payloads by Scanning Memory
https://www.linkedin.com/pulse/detecting-meterpreter-undetectable-payloads-scanning-mohammadbagher?trk=pulse_spock-articles
Related Links :
Bypass all anti-viruses by Encrypted Payloads with C#
https://www.linkedin.com/pulse/bypass-all-anti-viruses-encrypted-payloads-c-damon-mohammadbagher?trk=pulse_spock-articles
### ETWMonThread
Download Link => https://github.com/DamonMohammadbagher/Meterpreter_Payload_Detection/tree/master/MPD/ETWMonThread
