Performance Comparison of PyRAT and Phantom Antivirus Software Evasion Tools

Authors

  • Aminu Shawwal Adam Department of computer sciences, Faculty of Computing Federal University Dutse (F.U.D) Jigawa State
  • Zahraddeen Sufyanu Department of computer sciences, Faculty of Computing Federal University Dutse (F.U.D) Jigawa State

DOI:

https://doi.org/10.56471/slujst.v2i1.97

Abstract

Nowadays, Malwares have become the new way of cybercrime, and hackers are finding various ways to generate it in all available platforms. With this development, information security breach became one of the complex and very challenging issues most of the organizations are facing. This has motivated the penetration testers to indulge and develop tools and techniques similar to those used by real hackers, to attack systems and reveal its security weaknesses. This paper implements tools (pyRAT and Phantom) which automate the generation of Metasploit payload executable, that have the ability to invade systems without getting detected by most antivirus solutions. The exploitation process generates a meterpreter session between the user and the target system, with intention of gaining access to the target system. The paper adopted an experimental research design, in a Virtual lab setup with VMware Oracle VirtualBox, consisted of two machines (attacking and target machine) in order to test the Evasion tools against AV software products. The development of pyRAT and Phantom is strictly, for educational purposes and eventually to be helpful during the process of a penetration testing activities. Any other illegal use of this tool is not recommended. The study proved pyRAT with best evading capability having bypassed most of the selected antivirus by 67% while Phantom evasion tool acquired 50% evading stand

References

Aminu, S. A., Zahraddeen S. and Tajudden S. (2020) Evaluating the Effectiveness of AV Software Evasion Tools against a Window Platform. Fudma Journal of Sciences (FJS), Vol. 4 No. 1, March, 2020, pp. 89 – 92

Bei-Tseng, B., Chu, Aileen, G. B., Xiaohong, Y. and Monique, J. (2011). Overview of Penetration Testing. International Journal of Network Security & Its Applications (IJNSA), 3(6),

Balachandran and Chua (2018). Evaluation of the Effectiveness of Android Obfuscation on Evading Antimalware.Athttps://www.researchgate.net/publication/323786257_Effectiveness_of_Android_Obfuscation_on_Evading_Anti-malware (Accessed 28 December, 2019).

Barriga, J. J. and Yoo, S. G. (2017) Malware Detection and Evasion with Machine Learning Techniques: International Journal of Applied Engineering Research (IJAER), Vol 12, pp. 7207-7214.

Christos, K. (2018). Antivirus Software Evasion: An Evaluation of the AV Evasion Tools. Published by Piraeus University, 2018.

Desire Athow (2020) The best Antivirus Software Products of 2020. Retrieved from: https://www.ITproportal.com/us/best-freeantivirus, accessed on 10th August, 2020

Dave, K. (2012). A Python Book: Beginning Python, Advanced Python, and Python Exercises. https://www.archived/learnpython.com (Accessed on 20 January, 2020).

Faisal A. Garba, Kabiru I. Kunya, Shazali A. Ibrahim, Abubakar B. Isah, Khadija M. Muhammad, Nasir N. Wali (2019). Evaluation the State of the Art Antivirus Evasion Tools on Window and Android Platform. The 2019 2nd International Conference of IEEE (NigeriaComputConf)

Fisher, T. (2019). The 10 Best Free Antivirus Software of 2019. Retrieved from: https://www.lifewire.com/best-free-antivirus-software- 4151895. Accessed on 02, Feb., 2020.

Garcia, G., A. R., Johnston, R., (2002). Vulnerability Assessment of Security Seals. A Technical report LA- UR-96-3672. Published by Alamos National Lab.

J., Allen (2019). Eight (8) of the Best Free Antivirus Software. Retrieved from: https://mashable.com/roundup/best-free-antivirus/. Accessed: 5th Jan., 2020.

Joel, K. A. (2014). Network and Systems Security Assessment using penetration testing. University Of Science and Technology Kwame Nkrumah.

Kim, H. S. and Sukwong, O. (2011). Commercial Antivirus Software Effectiveness: An Empirical Study, IEEE Computer Society, pp. 63-70.

Moore, H. D., (2003) Metasploits Project. Retrieved from: https://www.metasploitproect.com. Accessed on 2nd March, 2020.

Mike Williams (2020) Top Five Antiviruses for 2020. Retrieved from: https://www.safetyDetection.com/us/best-freeantivirus, accessed on 10th August, 2020.

Nikolaos, Themelis (2018). A Tool for Antivirus Evasion: pyRAT. The University of Piraeus, Available: https://github.com/govolution/avet.net. Accessed on 10 Feb., 2019.

Nishant, S. (2012). Security Assessment via Penetration Testing: A Network and System Administrator’s Approach. University Of Oslo, accessed on Feb. 14, 2020.

Neil, J., Rubenking (2019). The 2019-2020 Best Free Antivirus Products. Retrieved from: https://www.pcmag.com/roundup/267984/the-bestfree- antivirus-protection. Accessed on 9th Feb., 2020.

Orphanides, K. G. (2019). Best Free Antivirus 2019: 6 tried and tested ways to stay safe. Retrieved from: https://www.trustedreviews.com/best/best-freeantivirus-net. Accessed on 28, Jan., 2020.

Paul W. (2020). Best Free Antivirus Software 2019-2020. Retrieved from: https://www.tomsguide.com/us/best-freeantivirus, review-6003.html Accessed: Feb., 2020.

Robert Beteman (2020). The 10 Best Antiviruses in 2020| Windows, Android iOS and Mac. Retrieved from: https://www.safetyDetection.com/us/best-freeantivirus, accessed on 10th August, 2020

Techopedia website (2019). Malware – Payload Behavior. Available at www.technopedia.com Accessed: on January 2020.

Published

2021-01-23