Defeat-Defender免杀项目

Defeat-Defender免杀项目

https://github.com/swagkarna/Defeat-Defender

Bypasssing Windows-Defender Techniques :

Recently Windows Introduced new Feature called "Tamper Protection".Which Prevents the disable of real-time protection and modifying defender registry keys using powershell or cmd...If you need to disable real-time protection you need to do manually....But We will disable Real Time Protection using NSudo without trigerring Windows Defender

After it got admin permission it will disable defender

1. PUAProtection

2. Automatic Sample Submission

3. Windows FireWall

4. Windows Smart Screen(Permanently)

5. Disable Quickscan

6. Add exe file to exclusions in defender settings

7. Disable Ransomware Protection