This course will teach you how to become a better ethical hacker, pentester and red teamer by learning malware development in Windows.
RED TEAM Operator: Malware Development Essentials Course
Contents:-
Intro and Setup
Short introduction to malware development and setting up our test environment
Introduction
Development VM Setup
RTO-Win10.ova
RTO-maldev.zip
Portable Executable
Explore PE files, their structure and where is a good place for your payload
PE files - format and structure
PE Bear - looking inside
Generating EXE vs DLL
PE compilation
Droppers
Learn how to write custom droppers
Where to store payloads?
Storing payloads in code section
Data section as a container
Payloads in resource section
Obfuscation and Hiding
Discover how to hide your code from static and dynamic analysis
Encoding and Encryption
Payload encoding
Encrypting payloads - XOR
Encrypting payloads - AES
Antivirus vs call obfuscation
Implementing function call obfuscation
Backdoors and Trojans
Learn how to backdoor existing software and convert it into a custom trojan.
Backdooring PE theory
Making Putty a trojan
Code Injection
Explore potential ways to inject your payload with classic shellcode and DLL injections
What is code injection?
Injecting code into remote process
Implementing code injection
Loading DLLs into remote process
DLL generator and injector
Extras
Making program invisible
Combined Project
Take everything what you have learned so far, and build a new custom dropper
Dropper overview
Dropper implementation
Bypassing Windows Defender
Assignment
RED TEAM Operator: Malware Development Essentials Course
Contents:-
Intro and Setup
Short introduction to malware development and setting up our test environment
Introduction
Development VM Setup
RTO-Win10.ova
RTO-maldev.zip
Portable Executable
Explore PE files, their structure and where is a good place for your payload
PE files - format and structure
PE Bear - looking inside
Generating EXE vs DLL
PE compilation
Droppers
Learn how to write custom droppers
Where to store payloads?
Storing payloads in code section
Data section as a container
Payloads in resource section
Obfuscation and Hiding
Discover how to hide your code from static and dynamic analysis
Encoding and Encryption
Payload encoding
Encrypting payloads - XOR
Encrypting payloads - AES
Antivirus vs call obfuscation
Implementing function call obfuscation
Backdoors and Trojans
Learn how to backdoor existing software and convert it into a custom trojan.
Backdooring PE theory
Making Putty a trojan
Code Injection
Explore potential ways to inject your payload with classic shellcode and DLL injections
What is code injection?
Injecting code into remote process
Implementing code injection
Loading DLLs into remote process
DLL generator and injector
Extras
Making program invisible
Combined Project
Take everything what you have learned so far, and build a new custom dropper
Dropper overview
Dropper implementation
Bypassing Windows Defender
Assignment
