Malware RED TEAM Operator: Malware Development Intermediate Course By SekTor7

[LikeOsado]

More advanced malware development techniques in Windows, including: API hooking, 32-/64-bit migrations, reflective binaries and more.

Contents​

Intro and Setup​

Course Introduction
Development VM Setup
RTO-MalDev2.ova
RTO-MDI.zip

PE madness​

Revisiting PE file format
Walking through Export Address Table
Dancing with IAT
GetProcAddress/GetModuleHandle implementations
PE with no imports
Assignment

Code Injection​

Classic Injection Variations
Thread Context
Sections & Views
Asynchronous Procedure Calls
EarlyBird
Assignment

​

Reflective DLLs​

Reflective Injection Explained
ReflectiveLoader source review
Implanting RDI in source code
Shellcode RDI
Assignment

​

x86 vs x64​

WoW64 and Heaven's Gate
Migrating between 32-bit & 64-bit processes

Hooking​

API Hooking intro
Hooking with Detours
IAT hooks
In-line patching
Assignment

​

Payload Control via IPC​

MultiPayload Control

Combined Project​

Project Design
VCsniff
VCmigrate
VCpersist

Assignment #1
Assignment #2
Assignment #3

​

Summary​

Closing words

Watch Online Or Download:-
[Hidden content]

ty

 

[madaniel900]

More advanced malware development techniques in Windows, including: API hooking, 32-/64-bit migrations, reflective binaries and more.

Contents​

Intro and Setup​

Course Introduction
Development VM Setup
RTO-MalDev2.ova
RTO-MDI.zip

PE madness​

Revisiting PE file format
Walking through Export Address Table
Dancing with IAT
GetProcAddress/GetModuleHandle implementations
PE with no imports
Assignment

Code Injection​

Classic Injection Variations
Thread Context
Sections & Views
Asynchronous Procedure Calls
EarlyBird
Assignment

​

Reflective DLLs​

Reflective Injection Explained
ReflectiveLoader source review
Implanting RDI in source code
Shellcode RDI
Assignment

​

x86 vs x64​

WoW64 and Heaven's Gate
Migrating between 32-bit & 64-bit processes

Hooking​

API Hooking intro
Hooking with Detours
IAT hooks
In-line patching
Assignment

​

Payload Control via IPC​

MultiPayload Control

Combined Project​

Project Design
VCsniff
VCmigrate
VCpersist

Assignment #1
Assignment #2
Assignment #3

​

Summary​

Closing words

Watch Online Or Download:-
[Hidden content]

 

[panam91]

More advanced malware development techniques in Windows, including: API hooking, 32-/64-bit migrations, reflective binaries and more.

Contents​

Intro and Setup​

Course Introduction
Development VM Setup
RTO-MalDev2.ova
RTO-MDI.zip

PE madness​

Revisiting PE file format
Walking through Export Address Table
Dancing with IAT
GetProcAddress/GetModuleHandle implementations
PE with no imports
Assignment

Code Injection​

Classic Injection Variations
Thread Context
Sections & Views
Asynchronous Procedure Calls
EarlyBird
Assignment

​

Reflective DLLs​

Reflective Injection Explained
ReflectiveLoader source review
Implanting RDI in source code
Shellcode RDI
Assignment

​

x86 vs x64​

WoW64 and Heaven's Gate
Migrating between 32-bit & 64-bit processes

Hooking​

API Hooking intro
Hooking with Detours
IAT hooks
In-line patching
Assignment

​

Payload Control via IPC​

MultiPayload Control

Combined Project​

Project Design
VCsniff
VCmigrate
VCpersist

Assignment #1
Assignment #2
Assignment #3

​

Summary​

Closing words

Watch Online Or Download:-
[Hidden content]

thank you

 

[pompompurinsmom]

Just wanted to let you know that "3. Revisiting PE file format - hellofhackers.com.mp4" is not the correct file. It's a duplicate of "1. Course Introduction - hellofhackers.com.mp4", the txt files with the video link have the same link.

 

[liteid]

thanks

 

[liteid]

thanks

 

[jqxw_jvnwg48]

More advanced malware development techniques in Windows, including: API hooking, 32-/64-bit migrations, reflective binaries and more.

Contents​

Intro and Setup​

Course Introduction
Development VM Setup
RTO-MalDev2.ova
RTO-MDI.zip

PE madness​

Revisiting PE file format
Walking through Export Address Table
Dancing with IAT
GetProcAddress/GetModuleHandle implementations
PE with no imports
Assignment

Code Injection​

Classic Injection Variations
Thread Context
Sections & Views
Asynchronous Procedure Calls
EarlyBird
Assignment

​

Reflective DLLs​

Reflective Injection Explained
ReflectiveLoader source review
Implanting RDI in source code
Shellcode RDI
Assignment

​

x86 vs x64​

WoW64 and Heaven's Gate
Migrating between 32-bit & 64-bit processes

Hooking​

API Hooking intro
Hooking with Detours
IAT hooks
In-line patching
Assignment

​

Payload Control via IPC​

MultiPayload Control

Combined Project​

Project Design
VCsniff
VCmigrate
VCpersist

Assignment #1
Assignment #2
Assignment #3

​

Summary​

Closing words

Watch Online Or Download:-
[Hidden content]

WOwowoowowow

 

[asspuncher33]

Thank you!

 

[koaj]

h

 

[debug0001]

thanks a lot

 

[socketplugs]

Hope it's good, thanks

 

[socketplugs]

RTO-MalDev2.ova - CORRUPTED !!
RTO-MDI.zip - MISSING !!
But thanks anyway, the videos were there.

 

[jzeflazd]

thanks for sharing

 

[godcomplex]

More advanced malware development techniques in Windows, including: API hooking, 32-/64-bit migrations, reflective binaries and more.

Contents​

Intro and Setup​

Course Introduction
Development VM Setup
RTO-MalDev2.ova
RTO-MDI.zip

PE madness​

Revisiting PE file format
Walking through Export Address Table
Dancing with IAT
GetProcAddress/GetModuleHandle implementations
PE with no imports
Assignment

Code Injection​

Classic Injection Variations
Thread Context
Sections & Views
Asynchronous Procedure Calls
EarlyBird
Assignment

​

Reflective DLLs​

Reflective Injection Explained
ReflectiveLoader source review
Implanting RDI in source code
Shellcode RDI
Assignment

​

x86 vs x64​

WoW64 and Heaven's Gate
Migrating between 32-bit & 64-bit processes

Hooking​

API Hooking intro
Hooking with Detours
IAT hooks
In-line patching
Assignment

​

Payload Control via IPC​

MultiPayload Control

Combined Project​

Project Design
VCsniff
VCmigrate
VCpersist

Assignment #1
Assignment #2
Assignment #3

​

Summary​

Closing words

Watch Online Or Download:-
[Hidden content]

thank you very much, i have been looking for this course all around the internet, now i finally found it thanks!

 

[m4z3]

Cool

 

[ratack]

thx

 

[chhaopop]

df

 

[marijanti]

awesome!

 

[mishav]

ok. Bro. Big thanks

 

[joserosch]

Thabks for share mate