Veil-Evasion is used for what purpose in penetration testing?

• A. A password cracking toolkit.
• B. A framework used to generate AV-evading payloads.
• C. A network vulnerability scanner.
• D. A web application firewall.

Answer: (B)

Veil-Evasion is a framework designed to bypass antivirus defenses by generating payloads that attempt to evade detection. It provides tools and methods to obfuscate, encode, or otherwise modify payloads so they appear less suspicious to signature-based antivirus and endpoint protection, enabling a tester to verify how well defenses block or detect malicious code during post-exploitation scenarios. This isn’t about cracking passwords, scanning networks for vulnerabilities, or configuring a web application firewall—it's about testing how well antivirus/EDR controls can detect and stop malicious payload delivery.