Malware to evade whitelist application

[Ar47]

Hi All,

I was wondering what tool/technique you would use to create a piece of malware that will evade a white-list application?

The malware will be delivered via email for an ethical pentest.

 

Thanks in advance.

[digip]

I had recently seen something for Powershell, that allows any code to run, but required a registry tweak to accept the applied manifests or signatures for the scripts. Not exactly what you were looking for, but something might spark an idea on how to work around a whitelist for apps.