Veil

Veil is a tool for creating payloads that evade antivirus detection. It is specifically designed to generate Metasploit payloads capable of bypassing common antivirus solutions, making it useful for penetration testing and red team operations where stealth is required.

The tool supports Kali Linux environments and includes setup scripts that detect the operating system version and architecture. Veil replaces the deprecated veil-evasion package and provides transitional packages like veil-catapult for compatibility.

Use cases include generating undetectable payloads for exploitation during security assessments, testing antivirus efficacy, and developing evasion techniques against endpoint security solutions.

Veil operates by generating modified Metasploit payloads using various obfuscation and encoding techniques to evade signature-based antivirus detection. The setup script configures the environment, detects the OS (Kali Linux), architecture (x86_64), and installs necessary dependencies like metasploit-framework, mingw-w64, mono-mcs, and wine. It prompts for installation confirmation and sets up in /usr/share/veil.