Bypass Windows Defender 2024 - Windows Cyber Security

Be better than yesterday
In this video, we will be demonstrating how we can bypass the latest Windows Defender on a fully updated Windows 11 machine.
The video provides a step-by-step demonstration on modifying the source code of the FilelessPELoader project, resulting in the loader being undetected by Windows Defender.
Using the modified undetected FilelessPELoader, it was possible to remotely load Mimikatz and a Meterpreter reverse shell binary directly into memory and execute it.
Previous video on FilelessPELoader:
• Bypass Windows Defende...
FilelessPELoader Github:
github.com/Saa...
Stay connected:
Twitter: / gemini_security
Udemy: www.udemy.com/...
Github: github.com/gem...
Discord: / discord

[@offensive-operator]

OMG my brother was telling me about you almost every week, so long without posting videos. he will be so happy when i tell him there is a new video.

[@gemini_security]

Hello,
Your positive comment is greatly appreciated.
I am deeply honoured by your brother's support and it is very encouraging to hear that, thanks!
Have a great day,

[@tlykuyiyhaa8382]

I LOVE tours videos so much dont stop

[@gemini_security]

Hello,
Your positive comment is greatly appreciated.
I am glad that you've enjoyed it.
Have a great day,

[@SolitaryElite]

great job man))) i love these kinds of videos

[@gemini_security]

Hello,
Your positive comment is greatly appreciated.
I am glad that you've enjoyed it.
Have a great day,

[@alientec258]

please more of that .
Very valuable Content
thx 😀

[@gemini_security]

Hello,
Your positive comment is greatly appreciated. I am glad that you've enjoyed it.
Have a great day,

[@alientec258]

@@gemini_security youre welcome 🙂

[@christophermoltisanti7104]

We love your Videos !!!

[@gemini_security]

Hello,
Your positive comment is greatly appreciated.
I am glad that you've enjoyed it.
Have a great day,

[@saidullahansari5588]

I love your content! Expecting more vidoes

[@brianchaplin-nx6qd]

love your videos bro😍😍

[@d.josephm.thorne-curtis9817]

Excellent work!!

[@gemini_security]

Hello,
Your positive comment is greatly appreciated.
I am glad that you've enjoyed it.
Have a great day,

[@EliteSoulja360]

Welcome back bro! Please do another video on ransomware creation or a keylogger in 2024!

[@hiddengo3232]

you are back🎉

[@gemini_security]

Hello,
Thanks for the continue support despite a long break, it is very much appreciated!
Have a great day,

[@DArkZpiNer]

¡¡Eres mi inspiración!!

[@hiddengo3232]

waiting for next video

[@mohitdabas08]

Simple and amazing

[@pdfToMp3]

Yo could you make some video on delivery methods? love your content by the way!

[@islamahmed704]

very nice

[@MalwareHunter_07]

Plz make videos on EDR evasion thanks for this :)

[@Ft.Prince]

❤❤

[@user-wp5en1lt8r]

i didn't understand what u did there with the arguments supplied part could u please explain

[@claudio1206z]

It worked but when i execute mimikatz or meterpreter through the executable in the cmd, it gets detected

[@ilmurlocdiplomato3071]

I don’t understand why defender didn’t detect mimikatz?

[@ARAVIN007]

Bro I have filePEloader successfully bypass the windows defender when the mimikatz load within 2s windows defender blocked it any suggestions how resolve it

[@richardjones9598]

Same as me brother. Mimikatz still picked up on execution. Filelesspeloader is OK

[@ARAVIN007]

@@richardjones9598 did u know any alternative tools like Rubues other than mimikatz

[@gemini_security]

hmmmm. try using other LSASS dumpers. Nanodump perhaps

[@ARAVIN007]

@@gemini_security ok I will try

[@claudio1206z]

Me too, it doesnt work

[@islamahmed704]

I want a way to dump lsass without any detection

[@GateIsAGoat]

how do i do it for Quasar R.A.T ?

[@tomiwafalade5480]

How can this be used in a Real World scenario anybody ??

[@hiddengo3232]

how to bypass applocker with defender bypass

[@SolitaryElite]

zip/iso method got patched. however you could try making a LNK that downloads and executes your malw. you could also try making a javascript/vbs that either downloads and executes or writes the file to disk directry and then runs it. i think that will bypass it.

[@hiddengo3232]

@@SolitaryElite can u explain? How to do that with LNK

[@SolitaryElite]

@@hiddengo3232 just make shourtcut and enter command to download and execute.

[@gemini_security]

I guess I could make a video on AppLocker. It is pretty much what the other comments mentioned - you have to figure out what is allowed and use the allowed binaries (usually LOLBAS - lolbas-project.github.io/) to execute your malicious program/code.

[@AshwinSKumar]

Does this still work?

[@arjunraghunadhan3611]

Please disable cloud delivered protection
I don't trust windows defender

[@gemini_security]

Hello,
Thanks for your suggestion, but turning it off wouldn't make it a complete bypass.
Cloud Protection provides a more complete detection bypass which will be more valuable for the audience.
Have a great day,

[@lumikarhu]

whats the point showing it with the cloud protection disabled? having it enabled makes it more challenging :-)

[@gemini_security]

hehe that is right

[@pentest-lq5sl]

is not work fake way