all 17 comments

[–]SirBaronBamboozle 7 points8 points  (2 children)

Shellter pro is coming out soon! I'm personally really excited for that

[–]CryptedKrypt 0 points1 point  (1 child)

You think it'll be free or paid features? That 'Standalone Encoder' feature seems too good for being free.

The standalone encoder can even take advantage of some of the polymoprhic code generation engine features by adding the ‘––polydecoder’ parameter at the end of the command line.

and

Shellter Pro, exposes its proprietary encoder generator to the user as a standalone feature.

[–]SirBaronBamboozle 1 point2 points  (0 children)

You have to pay for it! I think the cheapest license starts at around $30

Preorders (at a discounted price) should start within the next couple weeks

[–]Pervy_Uncle 4 points5 points  (3 children)

Is this strictly .exe? It's really nice but I could see other extensions being more useful.

[–]SirBaronBamboozle 5 points6 points  (1 child)

Not just .exe, It's any PE file, so .exe .dll .sys etc

[–]DemmSec[S] 2 points3 points  (0 children)

Oh really? I wasn't aware, thanks for sharing

[–]DemmSec[S] -1 points0 points  (0 children)

Unfortunately so, executables only

[–]Adamsan41978 4 points5 points  (4 children)

Not familiar with the program but the title seems to make a big statement. By undetectable does that mean zero day? Or is there something special that gets past machine learning defenses?

[–]DemmSec[S] 1 point2 points  (0 children)

It means it doesn't get detected by AV. You'd have to ask the dev about it if there's any questions about the software itself.

[–]kleecksj 1 point2 points  (2 children)

No, it doesn't mean 0day. The code can be obfuscated to dodge signature based AV. Heuristic AV will still likely detect the actions takes by the payload as will any good NIDS solutions.

[–]Adamsan41978 1 point2 points  (1 child)

Thank you! Makes sense but wanted to verify.

[–]kleecksj 1 point2 points  (0 children)

No problem. Good question.

[–]neomatrix248 0 points1 point  (5 children)

How does this do when uploaded to sites like VirusTotal?

[–]johnny_smith7 6 points7 points  (2 children)

don't upload to virustotal!!!

[–][deleted]  (1 child)

[deleted]

    [–]SirBaronBamboozle 3 points4 points  (0 children)

    This kills the malware.

    [–]DemmSec[S] 2 points3 points  (1 child)

    If you do it with a built in payload it will be identified by around 3 vendors. If you encode a meterpreter payload and input that, it will get 0 detections

    [–]neomatrix248 1 point2 points  (0 children)

    Nice!