[Sithum Nimlaka Abeydheera]

Zaid,
Do you want to change more rows in the hex editor besides the rows you use to avoid AV?

Regards,
Sithum Nimlaka

[Diego Pérez]

Hi Sithum!
Yeah! you can modify more rows, just be careful to don’t break the code, that’s why we try it first whithout defender or AVs enabled. Once we know the backdoor works we can try to modify it, turn on AV again and if it pass we know we should get a connection back, but this is a matter of try and error.
Hope it helps!
Diego

[Sithum Nimlaka Abeydheera]

How i understand what rows have the our code ?

[Diego Pérez]

Hi Sithum!
Just follow Zaid’s suggestions about what can be actual code and what can be modified. Then search around your code with the hex editor tool.

Let me know how it goes!
Diego

[Sithum Nimlaka Abeydheera]

okay, thanks Diego

[Author]

Posts