Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Replace Mimikatz with pypykatz for better defence evasion #583

Closed
ShayNehmad opened this issue Mar 26, 2020 · 0 comments
Closed

Replace Mimikatz with pypykatz for better defence evasion #583

ShayNehmad opened this issue Mar 26, 2020 · 0 comments
Assignees
@VakarisZ
Labels
Enhancement Issue that describes an enhancement to a current feature.
Milestone
1.9.0

Comments

@ShayNehmad
Copy link
Contributor

Is your feature request related to a problem? Please describe.
Most AVs recognize and delete the Mimikatz DLL when we unzip it to disk and therefore we don't steal creds

Describe the solution you'd like
Moving to Pykatz will circumvent this defence mechanism.

Describe alternatives you've considered
Different loaders for the DLL, obfuscation of the DLL itself
@ShayNehmad ShayNehmad added Enhancement Issue that describes an enhancement to a current feature. Monkey labels Mar 26, 2020
@ShayNehmad ShayNehmad mentioned this issue Mar 29, 2020
Closed
@ShayNehmad ShayNehmad changed the title Replace Mimikatz with Pykatz for better defence evasion Replace Mimikatz with pypykatz for better defence evasion Mar 29, 2020
@EddieIvan01 EddieIvan01 mentioned this issue Mar 30, 2020
Closed
1 task
@ShayNehmad ShayNehmad added this to the 1.9.0 milestone Apr 8, 2020
@ShayNehmad ShayNehmad added the e/8 label May 27, 2020
@ShayNehmad ShayNehmad added e/3 and removed e/8 labels Jun 1, 2020
@VakarisZ VakarisZ mentioned this issue Jun 5, 2020
Merged
3 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@VakarisZ VakarisZ

Labels
Enhancement Issue that describes an enhancement to a current feature.
Projects
None yet
Milestone
1.9.0
Development

Successfully merging a pull request may close this issue.

Migrating mimikatz.dll to pypykatz
2 participants
@VakarisZ @ShayNehmad