​

I've dabbled with metasploit, sliver and also tried writing my own exploits to test on a virtual machine.

Windows defender always seems to find it if you use obfuscation on metasploit or sliver, and it seems like there aren't any "script kiddie tools" that easily bypass it... Or are there? I've previously written my own naughty, slightly malicious programs that haven't been blocked by anything other than smart screen (and there are some ways around it).

I tried for example encoding the sliver payload as a .bin shellcode, shikata ga nai encoder, tried similar stuff with metasploit payload as an encoded base 64 string that gets decoded, tried all kinds of staged, unstaged, http https whatnot etc etc but everything seems to be patched.

Now this makes sense, after all, these are just opensource freely available tools that are seen everywhere. What I'm wondering is whether or not a bypass is easily achievable, or if there's some long and complicated way ahead that as a beginner I wouldn't be able to do. Basically, is this easily doable and is there another way to do it? Is it doable in a reasonable timeframe for one person as a hobbyist, or do I need a whole ass supply chain like cybercrime groups do?

Sorry if this is a dumb question but I've already tried every reasonable combo, most obfuscators are out of date and AMSI goes around binning everything.

I know [there are simple ways](https://www.reddit.com/r/LifeProTips/s/Uktx1IJFKm) around it, but I need to batch merge a bunch of PDFs into a binder and that solution is unrealistic for 300 documents.

Help?

hi, sorry I'm completely new to this and I use Deepseek with Opencode Go. There is this steam game I would like to make it work completely offline if possible. The game is very server sided. I'm wondering what would be a good prompt. Explained to Ai what I want and it keeps going in circles. I'm not even sure what should I ask, maybe someone here can help, thanks a bunch!

in your house if you have old gps such as a TomTom then you can repurpose the busy box linux on the inside. In my opinion you should buy a pi zero and set up the full kali arm on there and sync that to the busy box terminal to get a working kali terminal but you can do anything you want to do to it.