Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/swagkarna/Defeat-Defender-V1.2.0

Powerful batch script to dismantle complete windows defender protection and even bypass tamper protection ..Disable Windows-Defender Permanently....Hack windows. POC
https://github.com/swagkarna/Defeat-Defender-V1.2.0

antivirus av-evasion batch bypass bypass-antivirus bypass-defender defender disable-windows-defender dropper fud hack-tool hacking hackwindows malware malware-dropper payload proof-of-concept undetectable

Last synced: 3 months ago
JSON representation

Powerful batch script to dismantle complete windows defender protection and even bypass tamper protection ..Disable Windows-Defender Permanently....Hack windows. POC

Host: GitHub
URL: https://github.com/swagkarna/Defeat-Defender-V1.2.0
Owner: swagkarna
License: gpl-3.0
Created: 2020-12-10T07:22:06.000Z (almost 4 years ago)
Default Branch: main
Last Pushed: 2023-10-20T17:55:09.000Z (about 1 year ago)
Last Synced: 2024-06-22T15:54:06.639Z (4 months ago)
Topics: antivirus, av-evasion, batch, bypass, bypass-antivirus, bypass-defender, defender, disable-windows-defender, dropper, fud, hack-tool, hacking, hackwindows, malware, malware-dropper, payload, proof-of-concept, undetectable
Language: Batchfile
Homepage:
Size: 18.4 MB
Stars: 1,389
Watchers: 44
Forks: 302
Open Issues: 1
Metadata Files:
- Readme: README.md
- License: LICENSE

Awesome Lists containing this project

jimsghstars - swagkarna/Defeat-Defender-V1.2.0 - Powerful batch script to dismantle complete windows defender protection and even bypass tamper protection ..Disable Windows-Defender Permanently....Hack windows. POC (Batchfile)
awesome-hacking-lists - swagkarna/Defeat-Defender-V1.2.0 - Powerful batch script to dismantle complete windows defender protection and even bypass tamper protection ..Disable Windows-Defender Permanently....Hack windows. POC (Batchfile)

README

Defeat-Defender-1.2

---
* **If you like the tool and for my personal motivation so as to develop other tools please leave a +1 star**

### Powerfull Batch File To Disable Windows Defender,Firewall,Smartscreen And Execute the payload
### Usage :
* Run `run.bat` and enter the direct link of your malware
* Run the script "Defeat-Defender.bat" . It will ask for Admin Permission.If permission Granted The script will work Silently and dismantle all protection...
---
## After it got admin permission it will disable defender
- PUAProtection
- Automatic Sample Submission
- Windows FireWall
- Windows Smart Screen(Permanently)
- Disable Quickscan
- Add exe file to exclusions in defender settings
- Disable Defender Notification (Added Recently)
- Disable UAC(Reboot Required)
- Disable Ransomware Protection
- Disable TaskManager
- Disable registry etc..
---

## *Proof-Of-Concept*

https://user-images.githubusercontent.com/46685308/120778529-0bb82e80-c544-11eb-9a54-d7f5d30fddd0.mp4

---

## Bypasssing Windows-Defender Techniques :

Recently Windows Introduced new Feature called "Tamper Protection".Which Prevents the disable of real-time protection and modifying defender registry keys using powershell or cmd...If you need to disable real-time protection you need to do manually....But We will disable Real Time Protection using NSudo without trigerring Windows Defender

---
## Running Defeat-Defender Script

Tested on **Windows 11 Pro**

---

## After Reboot

---

## Warning
This Script will completely Disable `Windefend` Services . And also it is very difficult to revert the changes..Think twice before you run the script

---
## Behind The Scenes :

When Batch file is executed it ask for admin permissions.After getting admin privileage it starts to disable windows defender real time protectin , firewall , smartscreen and starts downloading our backdoor from server and it will placed in startup folder.The backdoor will be executed after it has downloaded from server..And will be started whenever system starts..

---
## Check out this article :
https://secnhack.in/create-fud-fully-undetectable-payload-for-windows-10/

---

# Note :
### If you want to enable Defender Smart Screen.Use Smart Screen.bat file..
---
# Discalimer :
### Use this only for educational Purpose...Love you Guys Bye.....

---

## Contact :

---

Inspired From TechChip

---

### Special thanks to Jeffrey-d-howard(Senior Vulnerability Management Lead) For Posting Defeat-Defender on his linked page

---
### ❤️Supporters❤️
[![Stargazers repo roster for @swagkarna/Defeat-Defender-V1.2.0](https://reporoster.com/stars/swagkarna/Defeat-Defender-V1.2)](https://github.com/swagkarna/Defeat-Defender/stargazers)

[![Forkers repo roster for @swagkarna/Defeat-Defender-V1.2.0](https://reporoster.com/forks/swagkarna/Defeat-Defender-V1.2)](https://github.com/swagkarna/Defeat-Defender/network/members)

---