Zephranoid Posted September 5, 2016 Share Posted September 5, 2016 I was having problems with windows defender detecting Invoke-Mimikatz before I could run it when doing the Mr. Robot 15 second password attack so I created this script to disable windows defender. It is designed to be added to the beginning of other payloads, while the enable script is designed to be added after you have ran the attack but before you clear the run history. DisableWindowsDefender.txt EnableWindowsDefender.txt Quote Link to comment Share on other sites More sharing options...
nullcult Posted September 7, 2016 Share Posted September 7, 2016 (edited) Why not just use: sc config WinDefend start= disabled sc config wscsvc start= disabled The second one could help knock off windows security center just in case. Edited September 7, 2016 by nullcult Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.