> For the complete documentation index, see [llms.txt](https://ivalexev.gitbook.io/rednote/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ivalexev.gitbook.io/rednote/pentesting-process/software-attacks/av-evasion-and-obfuscation.md).
# AV Evasion & Obfuscation
## Sites
Once scanned, the platform sends our sample to every antivirus vendor that has an active membership.
## On-disk
* Packers
* Crypters
* Obfuscators
* Anti-debugging
* Anti-reversing
* VM / sandbox detection
## In-memory
* Remote Process Memory Injection
* *attempts to inject the payload into another valid PE that is not malicious.*
* Reflective DLL Injection
* *attempts to load a DLL stored by the attacker in the process memory.*
* Process Hollowing
* *attempts to launch a non-malicious process in suspended state, remove its image from memory, and replace it with a malicious executable before resuming execution.*
* Inline hooking
* *attempts to modify memory by introducing a hook into a function to redirect code execution to malicious code, then return to the modified function to resume normal execution.*