Novel Approach for Concealing Penetration Testing Payloads Using Data Privacy Obfuscation Techniques

Offensive security activities such as penetration testing is employed to simulate attack scenarios in order to test vulnerabilities. However, in past research defense evasion was not considered in the whole approach which decreases the realism factor of testing. In this paper we propose a novel approach for concealing malwares from static analysis using data privacy techniques such as suppression, generalization, and compression. We have provided an algorithm and implementation on GitHub. We have concluded that this approach is effective in malware concealment against static analysis.