Price: 6.00 USD | Size: 2.86 GB | Duration :5.32  Hours | 54 Video seasons | ★★★★★  4.6
BRAND : Expert TRAINING | ENGLISH | INSTANT DOWNLOAD | Bonus PDF Guides
 
Malware Development Intermediate Course Online Course & PDF Guides
 
This course builds on what you have learned so far by extending your development capabilities with:
playing with Process Environment Blocks and implementing our own function address resolution
more advanced code injection techniques
understanding how reflective binaries work and building custom reflective DLLs, either with source or binary only
in-memory hooking, capturing execution flow to block, monitor or evade functions of interest
grasping 32- and 64-bit processing and performing migrations between x86 and x64 processes
discussing inter process communication and how to control execution of multiple payloads
The course ends with a combined project, where you will create a custom dropper implementing discussed techniques.
 
You will receive a virtual machine with complete environment for developing and testing your software, and a set of source code templates which will allow you to focus on understanding the essential mechanisms instead of less important technical aspects of implementation.
 
Contents
Intro and Setup
Course Introduction
3 mins
Development VM Setup
3 mins
RTO-MalDev2.ova
RTO-MDI.zip
769 KB
PE madness
Revisiting PE file format
40 mins
Walking through Export Address Table
20 mins
Dancing with IAT
19 mins
GetProcAddress/GetModuleHandle implementations
31 mins
PE with no imports
8 mins
Assignment
Code Injection
Classic Injection Variations
7 mins
Thread Context
7 mins
Sections & Views
8 mins
Asynchronous Procedure Calls
8 mins
EarlyBird
8 mins
Assignment
Reflective DLLs
Reflective Injection Explained
4 mins
ReflectiveLoader source review
24 mins
Implanting RDI in source code
21 mins
Shellcode RDI
15 mins
Assignment
x86 vs x64
WoW64 and Heaven's Gate
17 mins
Migrating between 32-bit & 64-bit processes
24 mins
Hooking
API Hooking intro
4 mins
Hooking with Detours
21 mins
IAT hooks
10 mins
In-line patching
15 mins
Assignment
Payload Control via IPC
MultiPayload Control
6 mins
Combined Project
Project Design
4 mins
VCsniff
39 mins
VCmigrate
26 mins
VCpersist
13 mins
Assignment #1
Assignment #2
Assignment #3
Summary
Closing words
4 mins