Hacking Windows with Sliver C2 - Setup Demonstration with Windows Defender Bypass

Описание

Be better than yesterday -

This video provides a high level introduction to the Sliver C2 framework, followed by setup and installation instructions on a Kali operating system.

The video further provides a step-by-step guide on how to setup the Sliver C2 framework and obtain a reverse shell on a victim's Windows machine.

The demonstration in the video was made more challenging with Windows Defender turned on. It was possible to leverage another open-sourced tool, FilelessPELoader, to encrypt, decrypt, load, and execute the Sliver implant directly into memory.

DISCLAIMER:
All content posted on this Youtube channel is SOLELY FOR Educational and Awareness purposes ONLY. Any actions and/or activities related to the material presented in this Youtube channel is entirely YOUR responsibility.

We DO NOT promote, support, encourage any illegal activities such as hacking, and we WILL NOT BE HELD responsible in the event of any misuse and abuse of the content resulting in any criminal charges.

Stay connected:
Twitter: https://twitter.com/gemini_security
Udemy: https://www.udemy.com/user/gemini-88/
Github: https://github.com/gemini-security
Discord: https://discord.gg/u9Qxxbamke

Looking to donate?
BTC: 19HiqQ2Qw83mxK9dcdoWb8VfAcsNgmp52k

Hacking Windows Active Directory with Sliver C2:
https://www.youtube.com/watch?v=eotEvAZw5Lc

Link to Sliver C2 framework:
https://github.com/BishopFox/sliver

Link to previously uploaded video on FilelessPELoader:
https://youtu.be/zOcl3o5lYYo

References used in the video:
https://www.cybereason.com/blog/sliver-c2-leveraged-by-many-threat-actors
https://blogs.vmware.com/security/2023/01/detection-of-lateral-movement-with-the-sliver-c2-framework.html
https://www.scmagazine.com/brief/threat-intelligence/sliver-c2-framework-gaining-traction-among-threat-actors

Gemini Security Awesome Hacking T-Shirts - Support the channel:
https://www.redbubble.com/people/GeminiSecurity/shop?asc=u

Setup an entire Windows Active Directory environment to further demonstrate Sliver C2 framework capabilities and walkthrough other tactics and techniques, such as lateral movement, credentials harvesting, network pivoting, etc. Yay or Nay?