Damon Mohammadbagher (bbxc9x00x1f)

@UCl9sGiLwBNPXeL_h3_GW7vg - 1.5K subscribers

My name is Damon Mohammadbagher (Security Researcher, Pentester) Email: [email protected] & [email protected] Twitter: @_Damon_M_ some video about my Researches & all videos for my eBook "Bypassing AVs by C#.NET Programming" published in this channel. eBook PDF Files: [ github.com/DamonMohammadbagher/eBook-BypassingAVsB… ]

Home Videos Live Playlists

Creating C2server Network traffic to client PART11

Creating C2server Network traffic to client PART11 Damon Mohammadbagher (bbxc9x00x1f)

25 views - 1 month ago

Creating C2server Network traffic to client PART10

Creating C2server Network traffic to client PART10 Damon Mohammadbagher (bbxc9x00x1f)

24 views - 1 month ago

Creating C2server Network traffic to client PART9

Creating C2server Network traffic to client PART9 Damon Mohammadbagher (bbxc9x00x1f)

19 views - 3 months ago

Creating C2server Network traffic to client PART8

Creating C2server Network traffic to client PART8 Damon Mohammadbagher (bbxc9x00x1f)

26 views - 3 months ago

Creating C2server Network traffic to client PART7

Creating C2server Network traffic to client PART7 Damon Mohammadbagher (bbxc9x00x1f)

65 views - 4 months ago

Creating C2server Network traffic to client PART6

Creating C2server Network traffic to client PART6 Damon Mohammadbagher (bbxc9x00x1f)

16 views - 4 months ago

Creating C2server Network traffic to client PART5

Creating C2server Network traffic to client PART5 Damon Mohammadbagher (bbxc9x00x1f)

23 views - 4 months ago

Creating C2server Network traffic to client PART4

Creating C2server Network traffic to client PART4 Damon Mohammadbagher (bbxc9x00x1f)

14 views - 4 months ago

Creating C2server Network traffic to client PART3

Creating C2server Network traffic to client PART3 Damon Mohammadbagher (bbxc9x00x1f)

6 views - 4 months ago

Creating C2server Network traffic to client PART2

Creating C2server Network traffic to client PART2 Damon Mohammadbagher (bbxc9x00x1f)

7 views - 4 months ago

Creating C2server Network traffic to client PART1

Creating C2server Network traffic to client PART1 Damon Mohammadbagher (bbxc9x00x1f)

15 views - 4 months ago

Running c# code/exe in-memory by C2 Server via New App Domain in client side

Running c# code/exe in-memory by C2 Server via New App Domain in client side Damon Mohammadbagher (bbxc9x00x1f)

21 views - 4 months ago

New Method: Running .NET Assembly inside current process via calling CreateThread Api

New Method: Running .NET Assembly inside current process via calling CreateThread Api Damon Mohammadbagher (bbxc9x00x1f)

39 views - 6 months ago

Jump Mehods codes E9,74,EB in asm & delay in runtime without call any api to run sliver c2 payload

Jump Mehods codes E9,74,EB in asm & delay in runtime without call any api to run sliver c2 payload Damon Mohammadbagher (bbxc9x00x1f)

44 views - 8 months ago

Using Assembly to make Sleep in code (runtime) by C# without call any Windows API

Using Assembly to make Sleep in code (runtime) by C# without call any Windows API Damon Mohammadbagher (bbxc9x00x1f)

61 views - 9 months ago

Chapter 3.1 : ebook "Bypassing Anti-viruses by C# Programming v2.0" , Relative Jump 0xE9 method

Chapter 3.1 : ebook "Bypassing Anti-viruses by C# Programming v2.0" , Relative Jump 0xE9 method Damon Mohammadbagher (bbxc9x00x1f)

116 views - 9 months ago

SimpleC2Server by C# DNS IPv6 PTR Queries and DNS C2 Channel

SimpleC2Server by C# DNS IPv6 PTR Queries and DNS C2 Channel Damon Mohammadbagher (bbxc9x00x1f)

64 views - 1 year ago

SimpleC2Server by C# Running c# codes/cmd in-memory by 2 methods

SimpleC2Server by C# Running c# codes/cmd in-memory by 2 methods Damon Mohammadbagher (bbxc9x00x1f)

33 views - 1 year ago

SimpleC2Server by C# internal delay changes by Patterns

SimpleC2Server by C# internal delay changes by Patterns Damon Mohammadbagher (bbxc9x00x1f)

39 views - 1 year ago

SimpleC2Server by C# Injecting Commands into DNS AAAA Queries

SimpleC2Server by C# Injecting Commands into DNS AAAA Queries Damon Mohammadbagher (bbxc9x00x1f)

23 views - 1 year ago

SimpleC2Server by C# using encryption in bmp files & deltatime + algorithms

SimpleC2Server by C# using encryption in bmp files & deltatime + algorithms Damon Mohammadbagher (bbxc9x00x1f)

53 views - 1 year ago

SimpleC2server by c# and Injecting Shell commands & Outputs into PNG/BMP File over Http Traffic

SimpleC2server by c# and Injecting Shell commands & Outputs into PNG/BMP File over Http Traffic Damon Mohammadbagher (bbxc9x00x1f)

43 views - 1 year ago

eBook: Bypassing Anti-viruses by C# Programming v2.0 [Persian Language]

eBook: Bypassing Anti-viruses by C# Programming v2.0 [Persian Language] Damon Mohammadbagher (bbxc9x00x1f)

78 views - 1 year ago

Chapter 3.4 (ebook): Indirect Call C# Method In Memory via Technique [Opcodes.JMP]

Chapter 3.4 (ebook): Indirect Call C# Method In Memory via Technique [Opcodes.JMP] Damon Mohammadbagher (bbxc9x00x1f)

82 views - 1 year ago

SimpleC2 Server by C# [integrated with Seatbelt]

SimpleC2 Server by C# [integrated with Seatbelt] Damon Mohammadbagher (bbxc9x00x1f)

76 views - 1 year ago

Simple C# Reverse shell code + SimpleC2 Server by Bashscript (Part2) [Dynamic AppDomain Technique]

Simple C# Reverse shell code + SimpleC2 Server by Bashscript (Part2) [Dynamic AppDomain Technique] Damon Mohammadbagher (bbxc9x00x1f)

52 views - 1 year ago

Simple C# Reverse shell code + SimpleC2 Server by Bashscript (Part1)

Simple C# Reverse shell code + SimpleC2 Server by Bashscript (Part1) Damon Mohammadbagher (bbxc9x00x1f)

71 views - 1 year ago

Creating Blue Team Tools via ETW Events ETWProcessMon2.1 and ETWPM2Monitor2.1

Creating Blue Team Tools via ETW Events ETWProcessMon2.1 and ETWPM2Monitor2.1 Damon Mohammadbagher (bbxc9x00x1f)

37 views - 2 years ago

Creating Blue Team Tools by Sysmon Event IDs 1,3,8,25 with "SysPM2Monitor2.7" tool

Creating Blue Team Tools by Sysmon Event IDs 1,3,8,25 with "SysPM2Monitor2.7" tool Damon Mohammadbagher (bbxc9x00x1f)

34 views - 2 years ago

Creating Blue Team Tool via Sysmon Events [Realtime Monitoring Mitre Att&ck Techniques]

Creating Blue Team Tool via Sysmon Events [Realtime Monitoring Mitre Att&ck Techniques] Damon Mohammadbagher (bbxc9x00x1f)

119 views - 2 years ago

Chapter 3: Running/Calling Managed Code Directly by Windows Native Api CreateThread + JMP Method

Chapter 3: Running/Calling Managed Code Directly by Windows Native Api CreateThread + JMP Method Damon Mohammadbagher (bbxc9x00x1f)

241 views - 2 years ago

Detecting EKKO Technique in-memory via ETW event based Memory-Scanner VirtualMemAllocMon2.2

Detecting EKKO Technique in-memory via ETW event based Memory-Scanner VirtualMemAllocMon2.2 Damon Mohammadbagher (bbxc9x00x1f)

152 views - 2 years ago

Chapter 10 : ebook "Bypassing Anti-viruses by C# Programming v2.0" (Persian language)

Chapter 10 : ebook "Bypassing Anti-viruses by C# Programming v2.0" (Persian language) Damon Mohammadbagher (bbxc9x00x1f)

319 views - 2 years ago

Video 2 for Chapter 9.2 : ebook "Bypassing Anti-viruses by C# Programming v2.0" (Persian language)

Video 2 for Chapter 9.2 : ebook "Bypassing Anti-viruses by C# Programming v2.0" (Persian language) Damon Mohammadbagher (bbxc9x00x1f)

87 views - 2 years ago

Chapter 9.2 : ebook "Bypassing Anti-viruses by C# Programming v2.0" (Persian language)

Chapter 9.2 : ebook "Bypassing Anti-viruses by C# Programming v2.0" (Persian language) Damon Mohammadbagher (bbxc9x00x1f)

312 views - 2 years ago

Chapter 4.2 (Part-2): ebook "Bypassing Anti-viruses by C# Programming v2.0" (Persian language)

Chapter 4.2 (Part-2): ebook "Bypassing Anti-viruses by C# Programming v2.0" (Persian language) Damon Mohammadbagher (bbxc9x00x1f)

125 views - 2 years ago

Chapter 4.2: ebook "Bypassing Anti-viruses by C# Programming v2.0" (Persian language)

Chapter 4.2: ebook "Bypassing Anti-viruses by C# Programming v2.0" (Persian language) Damon Mohammadbagher (bbxc9x00x1f)

217 views - 2 years ago

Sliver-C2 and moving from Beacon Mode to Session Mode ...

Sliver-C2 and moving from Beacon Mode to Session Mode ... Damon Mohammadbagher (bbxc9x00x1f)

717 views - 2 years ago

Remote Thread Injection in c# via Delegate Method + FunctionPointer Technique (Defender bypassed)

Remote Thread Injection in c# via Delegate Method + FunctionPointer Technique (Defender bypassed) Damon Mohammadbagher (bbxc9x00x1f)

171 views - 2 years ago

Indirect Invoke C# Delegate in-memory + Async Method

Indirect Invoke C# Delegate in-memory + Async Method Damon Mohammadbagher (bbxc9x00x1f)

107 views - 2 years ago

Indirect Call Csharp Delegation Technique, Called [Indirect Technique D] & Kaspersky v21 Bypassed.

Indirect Call Csharp Delegation Technique, Called [Indirect Technique D] & Kaspersky v21 Bypassed. Damon Mohammadbagher (bbxc9x00x1f)

126 views - 2 years ago

Kaspersky v21.3.10.391 Bypassed by Chunked CobaltStrike Payloads

Kaspersky v21.3.10.391 Bypassed by Chunked CobaltStrike Payloads Damon Mohammadbagher (bbxc9x00x1f)

271 views - 2 years ago

Simple Trick:Code behavior detected by Anti-virus and Bypassing Some AVs via Sleep,timer trick in C#

Simple Trick:Code behavior detected by Anti-virus and Bypassing Some AVs via Sleep,timer trick in C# Damon Mohammadbagher (bbxc9x00x1f)

165 views - 3 years ago

Kaspersky Bypassed & some AVs, "Callback Function API integrated to Delegation Method [Technique D]"

Kaspersky Bypassed & some AVs, "Callback Function API integrated to Delegation Method [Technique D]" Damon Mohammadbagher (bbxc9x00x1f)

435 views - 3 years ago

Kaspersky Bypassed via New C# Code to injecting code into local process

Kaspersky Bypassed via New C# Code to injecting code into local process Damon Mohammadbagher (bbxc9x00x1f)

385 views - 3 years ago

Simple C2 Server by C# (Part 6) [Web-browser edition, Run in-memory Asm Bytes via C#]

Simple C2 Server by C# (Part 6) [Web-browser edition, Run in-memory Asm Bytes via C#] Damon Mohammadbagher (bbxc9x00x1f)

259 views - 3 years ago

Simple C2 Server by C# (Part 5)

Simple C2 Server by C# (Part 5) Damon Mohammadbagher (bbxc9x00x1f)

147 views - 3 years ago

Simple C2 Server by C# (Part 4)

Simple C2 Server by C# (Part 4) Damon Mohammadbagher (bbxc9x00x1f)

135 views - 3 years ago

Simple C2 Server by C# (Part 3)

Simple C2 Server by C# (Part 3) Damon Mohammadbagher (bbxc9x00x1f)

127 views - 3 years ago

Connection between Backdoor and Mapper/Proxy code (in-memory)

Connection between Backdoor and Mapper/Proxy code (in-memory) Damon Mohammadbagher (bbxc9x00x1f)

158 views - 3 years ago

Simple C2 Server by C# (Part 2)

Simple C2 Server by C# (Part 2) Damon Mohammadbagher (bbxc9x00x1f)

242 views - 3 years ago

Simple C2 Server by C#

Simple C2 Server by C# Damon Mohammadbagher (bbxc9x00x1f)

934 views - 3 years ago

BEV4 & Updating MitreAttack Real-time Scanner by 2 Methods (Text DB file or Atomic-red-team md file)

BEV4 & Updating MitreAttack Real-time Scanner by 2 Methods (Text DB file or Atomic-red-team md file) Damon Mohammadbagher (bbxc9x00x1f)

111 views - 3 years ago

BEV4 , Real-time & Checking Processes for Mitre Attack Techniques by Sysmon Events

BEV4 , Real-time & Checking Processes for Mitre Attack Techniques by Sysmon Events Damon Mohammadbagher (bbxc9x00x1f)

168 views - 3 years ago

BEV4 & Detecting Mitre Attack Techniques in Sysmon Events via yaml Files

BEV4 & Detecting Mitre Attack Techniques in Sysmon Events via yaml Files Damon Mohammadbagher (bbxc9x00x1f)

213 views - 3 years ago

ETWPM2Monitor2.1 , (false positive bug in Alarms by ETW Tab)

ETWPM2Monitor2.1 , (false positive bug in Alarms by ETW Tab) Damon Mohammadbagher (bbxc9x00x1f)

73 views - 3 years ago

SysPM2Monitor2_7 & Remote Thread Injection / Process Injection Detection by Sysmon + ETW

SysPM2Monitor2_7 & Remote Thread Injection / Process Injection Detection by Sysmon + ETW Damon Mohammadbagher (bbxc9x00x1f)

265 views - 4 years ago

ETWProcessMon2 (v2.1) + ETWPM2Monitor2 (v2.1) & Remote-Thread-Injection Detection via ETW

ETWProcessMon2 (v2.1) + ETWPM2Monitor2 (v2.1) & Remote-Thread-Injection Detection via ETW Damon Mohammadbagher (bbxc9x00x1f)

319 views - 4 years ago

Monitoring Process Injection (Remote Thread Injection) via Sysmon + ETW with "SysmonPM2 v2.7"

Monitoring Process Injection (Remote Thread Injection) via Sysmon + ETW with "SysmonPM2 v2.7" Damon Mohammadbagher (bbxc9x00x1f)

302 views - 4 years ago

Chapter 15 : C# + ETW vs Some Thread/Process/Code Injection Techniques

Chapter 15 : C# + ETW vs Some Thread/Process/Code Injection Techniques Damon Mohammadbagher (bbxc9x00x1f)

247 views - 4 years ago