av-edr-evasion - AV/EDR Evasion Techniques
Covers techniques for modifying, converting, encrypting, and testing payloads to bypass AV/EDR detection during delivery, execution, and post-exploitation.
Tags
Updated: 2026-10-16Typical Inputs
Typical Outputs
What this skill does
- Identify AV/EDR products
- Generate encoded payloads
- Encrypt PE files
- Inject PE shellcode
- Convert PE to shellcode
- Test detection rates
Inputs
- Target AV/EDR product
- Payload parameters
- PE executables
- .NET assemblies
- Shellcode files
- Connection parameters
- Delivery mechanism
Outputs
- Encoded payload files
- Encrypted PE files
- Injected PE files
- Shellcode binaries
- Detection test results
- C2 callback status
Requirements
- OpenClaw, Claude Code, Cursor, or Windsurf
- Bash, Read, Write, Edit, WebSearch, and WebFetch access
- shellter, veil, msfvenom, donut, pe2shc, hyperion, and crypter
