:Search:

Sektor7 - Malware Development Intermediate Course - Red Team Operator

Torrent:
Info Hash: 8888B58A5E18712E125F5801E7CDD2AF7253A41D
Similar Posts:
Uploader: BloodsoN
Source: TP Logo The Pirate Bay
Description:
Welcome to Malware Development Intermediate course! In our previous Essentials course we discussed basic steps to create a custom dropper. This course builds on what you have learned so far by extending your development capabilities with: playing with Process Environment Blocks and implementing our own function address resolution more advanced code injection techniques understanding how reflective binaries work and building custom reflective DLLs, either with source or binary only in-memory hooking, capturing execution flow to block, monitor or evade functions of interest grasping 32- and 64-bit processing and performing migrations between x86 and x64 processes discussing inter process communication and how to control execution of multiple payloads The course ends with a combined project, where you will create a custom dropper implementing discussed techniques. You will receive a virtual machine with complete environment for developing and testing your software, and a set of source code templates which will allow you to focus on understanding the essential mechanisms instead of less important technical aspects of implementation. COURSE IN A NUTSHELL You Will Learn What is PEB and how function address resolution works What are other code injection techniques How to build custom reflective binary How to hook APIs in memory How to migrate between 32- and 64-bit processes How to use IPC to control your payloads What Will You Get? Full-blown videos explaining all techniques in detail Transcription with English subtitles Text supplements with additional information (code snipets, structure definitions, technology description and context, etc.) Source code with code templates for rapid development VM image with ready-to-use development environment Requirements Recommended: taking Malware Development Essentials course Understanding of operating system architecture Some experience with Windows OS Computer with min. 4 GB of RAM + 30 GB of free disk space VirtualBox 7.0+ installed Strong will to learn and having fun Target Audience Ethical Hackers Penetration Testers Blue Teamers Threat Hunters All security engineers/professionals wanting to learn advanced offensive tactics
Category: Books
Size: 1.6 GB
Added: Sept. 10, 2025, 12:33 a.m.
Peers: Seeders: 0, Leechers: 5 (Last updated: 7 months ago)
Tracker Data:
Tracker Seeders Leechers Completed
udp://open.stealth.si:80/announce 0 0 0
udp://exodus.desync.com:6969/announce (Failed to scrape UDP tracker) 0 0 0
udp://tracker.cyberia.is:6969/announce (Failed to scrape UDP tracker) 0 0 0
udp://tracker.opentrackr.org:1337/announce 0 2 0
udp://tracker.torrent.eu.org:451/announce 0 0 0
udp://explodie.org:6969/announce 0 1 0
udp://tracker.birkenwald.de:6969/announce 0 2 0
udp://tracker.moeking.me:6969/announce (Failed to scrape UDP tracker) 0 0 0
udp://ipv4.tracker.harry.lu:80/announce (Failed to scrape UDP tracker) 0 0 0
udp://tracker.therarbg.to:6969/announce 0 0 0
Files:
  1. 1. Course Introduction.ts 4.8 MB
  2. 2. Development VM Setup.ts 7.0 MB
  3. aes.py 776 bytes
  4. compile.bat 116 bytes
  5. helpers.cpp 4.4 KB
  6. helpers.h 185 bytes
  7. implant.cpp 4.5 KB
  8. PEstructs.h 1.5 KB
  9. aes.py 776 bytes
  10. compile.bat 97 bytes
  11. helpers.cpp 3.3 KB
  12. helpers.h 185 bytes
  13. implant.cpp 2.4 KB
  14. PEstructs.h 1.5 KB
  15. compile.bat 129 bytes
  16. implant.cpp 7.4 KB
  17. compile.bat 116 bytes
  18. implant.cpp 7.1 KB
  19. compile.bat 116 bytes
  20. implant.cpp 9.7 KB
  21. compile.bat 116 bytes
  22. implant.cpp 8.7 KB
  23. compile.bat 116 bytes
  24. implant.cpp 8.3 KB
  25. aes.py 776 bytes
  26. compileDLL.bat 129 bytes
  27. implantDLL.cpp 4.4 KB
  28. ReflectiveDLLInjection.h 2.7 KB
  29. ReflectiveLoader.c 21.1 KB
  30. ReflectiveLoader.h 7.0 KB
  31. compile.bat 136 bytes
  32. implant.cpp 6.8 KB
  33. aes.py 776 bytes
  34. compileDLL.bat 125 bytes
  35. implantDLL.cpp 4.2 KB
  36. compile.bat 136 bytes
  37. implant.cpp 2.2 KB
  38. LICENSE 38.1 KB
  39. README.md 4.4 KB
  40. ShellcodeRDI.sln 5.1 KB
  41. App.config 151 bytes
  42. DotNet.csproj 4.9 KB
  43. Program.cs 60.8 KB
  44. AssemblyInfo.cs 1.4 KB
  45. FunctionTest.cpp 2.8 KB
  46. FunctionTest.vcxproj 7.1 KB
  47. FunctionTest.vcxproj.filters 1.5 KB
  48. stdafx.cpp 291 bytes
  49. stdafx.h 305 bytes
  50. targetver.h 306 bytes
  51. Get-FunctionHash.ps1 4.3 KB
  52. Get-LibSymbols.ps1 9.9 KB
  53. Get-ObjDump.format.ps1xml 13.0 KB
  54. Get-PEHeader.ps1 46.3 KB
  55. Out-Shellcode.ps1 940 bytes
  56. EncodeBlobs.py 3.4 KB
  57. FunctionToHash.py 993 bytes
  58. Loader.cpp 33.6 KB
  59. Native.vcxproj 7.8 KB
  60. Native.vcxproj.filters 1.3 KB
  61. stdafx.cpp 298 bytes
  62. stdafx.h 305 bytes
  63. targetver.h 306 bytes
  64. ConvertTo-Shellcode.ps1 39.4 KB
  65. Invoke-Shellcode.ps1 22.9 KB
  66. ConvertToShellcode.py 1.6 KB
  67. Python.pyproj 1.8 KB
  68. ShellcodeRDI.py 29.1 KB
  69. ShellcodeRDI.cpython-38.pyc 8.4 KB
  70. function_link_order.txt 30 bytes
  71. GetProcAddressWithHash.h 3.6 KB
  72. ShellcodeRDI.c 18.1 KB
  73. ShellcodeRDI.vcxproj 33.0 KB
  74. ShellcodeRDI.vcxproj.filters 1.0 KB
  75. dllmain.cpp 1.2 KB
  76. resource.h 388 bytes
  77. Resource.rc 2.6 KB
  78. TestDLL.vcxproj 8.8 KB
  79. TestDLL.vcxproj.filters 938 bytes
  80. aes.py 776 bytes
  81. compile.bat 116 bytes
  82. execute64.bin 75 bytes
  83. implant.cpp 16.2 KB
  84. wownative.bin 296 bytes
  85. compile.bat 224 bytes
  86. detours.h 38.7 KB
  87. detver.h 721 bytes
  88. hookem.cpp 1.5 KB
  89. hookme.cpp 499 bytes
  90. CREDITS.TXT 4.9 KB
  91. LICENSE.md 1.1 KB
  92. Makefile 1.7 KB
  93. README.md 3.1 KB
  94. system.mak 4.9 KB
  95. detours.lib 662.0 KB
  96. detours.pdb 172.0 KB
  97. common.mak 2.0 KB
  98. Makefile 9.6 KB
  99. README.TXT 2.6 KB
  100. comeasy.cpp 1.4 KB
  101. Makefile 3.8 KB
  102. wrotei.cpp 5.0 KB
  103. wrotei.rc 560 bytes
  104. commem.cpp 3.2 KB
  105. Makefile 1.2 KB
  106. cping.cpp 63.5 KB
  107. cping.dat 0 bytes
  108. iping.idl 681 bytes
  109. Makefile 3.3 KB
  110. ReadMe.Txt 1.5 KB
  111. arm.asm 6.6 KB
  112. disas.cpp 20.0 KB
  113. ia64.asm 27.4 KB
  114. Makefile 2.0 KB
  115. unk.cpp 309 bytes
  116. x64.asm 16.5 KB
  117. x86.cpp 5.0 KB
  118. dtarge.cpp 10.8 KB
  119. dtarge.h 3.4 KB
  120. dtarge.rc 556 bytes
  121. dtest.cpp 25.6 KB
  122. Makefile 2.9 KB
  123. NORMAL_IA64.TXT 5.2 KB
  124. NORMAL_X64.TXT 5.2 KB
  125. NORMAL_X86.TXT 5.2 KB
  126. dumpe.cpp 3.2 KB
  127. Makefile 1.3 KB
  128. dumpi.cpp 7.5 KB
  129. Makefile 1.2 KB
  130. main.cpp 5.6 KB
  131. Makefile 1.8 KB
  132. x64.asm 403 bytes
  133. x86.asm 433 bytes
  134. echofx.cpp 1.5 KB
  135. echofx.rc 569 bytes
  136. echonul.cpp 187 bytes
  137. main.cpp 459 bytes
  138. Makefile 3.2 KB
  139. edll1x.cpp 1.3 KB
  140. edll2x.cpp 1.3 KB
  141. edll3x.cpp 1.9 KB
  142. einst.cpp 2.3 KB
  143. Makefile 4.7 KB
  144. excep.cpp 3.7 KB
  145. firstexc.cpp 6.5 KB
  146. firstexc.h 609 bytes
  147. Makefile 1.2 KB
  148. extend.cpp 4.9 KB
  149. extend.rc 577 bytes
  150. findfunc.cpp 955 bytes
  151. Makefile 6.1 KB
  152. symtest.cpp 13.1 KB
  153. target.cpp 1.0 KB
  154. target.h 362 bytes
  155. target.rc 556 bytes
  156. impmunge.cpp 13.2 KB
  157. Makefile 1.7 KB
  158. Makefile 1.1 KB
  159. member.cpp 3.7 KB
  160. Makefile 3.6 KB
  161. ogldet.cpp 2.0 KB
  162. ogldet.rc 564 bytes
  163. testogl.cpp 470 bytes
  164. Makefile 1.1 KB
  165. region.cpp 2.9 KB
  166. Makefile 1.9 KB
  167. setdll.cpp 9.5 KB
  168. Makefile 3.8 KB
  169. simple.cpp 2.3 KB
  170. simple.rc 556 bytes
  171. sleep5.cpp 643 bytes
  172. dslept.cpp 3.9 KB
  173. dslept.rc 570 bytes
  174. Makefile 6.9 KB
  175. NORMAL_IA64.TXT 8.5 KB
  176. NORMAL_X64.TXT 8.1 KB
  177. NORMAL_X86.TXT 6.8 KB
  178. sleepbed.cpp 2.7 KB
  179. sleepnew.cpp 2.3 KB
  180. sleepold.cpp 1.7 KB
  181. slept.cpp 3.3 KB
  182. slept.h 559 bytes
  183. slept.rc 559 bytes
  184. verify.cpp 1.9 KB
  185. Makefile 2.9 KB
  186. sltest.cpp 4.3 KB
  187. sltestp.cpp 3.3 KB
  188. syelog.cpp 28.5 KB
  189. syelog.h 3.5 KB
  190. syelogd.cpp 16.8 KB
  191. Makefile 12.2 KB
  192. NORMAL_IA64.TXT 3.5 KB
  193. NORMAL_X64.TXT 3.3 KB
  194. talloc.cpp 15.9 KB
  195. tdll1x.cpp 525 bytes
  196. tdll2x.cpp 525 bytes
  197. tdll3x.cpp 525 bytes
  198. tdll4x.cpp 525 bytes
  199. tdll5x.cpp 525 bytes
  200. tdll6x.cpp 525 bytes
  201. tdll7x.cpp 525 bytes
  202. tdll8x.cpp 525 bytes
  203. tdll9x.cpp 525 bytes
  204. _win32.cpp 1.0 MB
  205. Makefile 5.4 KB
  206. testapi.cpp 2.0 KB
  207. trcapi.cpp 13.9 KB
  208. trcapi.rc 569 bytes
  209. Makefile 4.8 KB
  210. tracebld.cpp 17.6 KB
  211. tracebld.h 1.6 KB
  212. trcbld.cpp 129.1 KB
  213. trcbld.rc 565 bytes
  214. Makefile 3.2 KB
  215. trclnk.cpp 18.5 KB
  216. trclnk.rc 573 bytes
  217. Makefile 2.4 KB
  218. trcmem.cpp 14.9 KB
  219. trcmem.rc 564 bytes
  220. Makefile 2.4 KB
  221. trcreg.cpp 46.1 KB
  222. trcreg.rc 566 bytes
  223. Makefile 2.4 KB
  224. trcser.cpp 32.1 KB
  225. trcser.rc 564 bytes
  226. Makefile 2.9 KB
  227. trcssl.cpp 52.6 KB
  228. trcssl.rc 561 bytes
  229. Makefile 3.1 KB
  230. trctcp.cpp 56.2 KB
  231. trctcp.rc 561 bytes
  232. Makefile 8.6 KB
  233. managed.cs 1.4 KB
  234. size.cpp 2.6 KB
  235. tryman.cpp 524 bytes
  236. tstman.cpp 11.3 KB
  237. tstman.rc 566 bytes
  238. Makefile 1.6 KB
  239. withdll.cpp 15.7 KB
  240. compile.bat 196 bytes
  241. hookem.cpp 2.6 KB
  242. hookme.cpp 499 bytes
  243. compile.bat 196 bytes
  244. hookem.cpp 2.3 KB
  245. hookme.cpp 499 bytes
  246. aes.py 776 bytes
  247. compile.bat 136 bytes
  248. implant.cpp 5.6 KB
  249. calc-proc32.inc 578 bytes
  250. calc-proc64.inc 827 bytes
  251. calc-thread32.bin 193 bytes
  252. calc-thread32.inc 1.2 KB
  253. calc-thread64.bin 276 bytes
  254. calc-thread64.inc 1.7 KB
  255. msgbox32.bin 282 bytes
  256. msgbox32.inc 1.8 KB
  257. msgbox64.bin 334 bytes
  258. msgbox64.inc 2.1 KB
  259. 1. Revisiting PE file format.ts 187.9 MB
  260. 2. Walking through Export Address Table.ts 65.1 MB
  261. 3. Dancing with IAT.ts 81.5 MB
  262. 4. GetProcAddress_GetModuleHandle implementations.ts 136.1 MB
  263. 5. PE with no imports.ts 34.5 MB
  264. Assignment.txt 216 bytes
  265. 1. Classic Injection Variations.ts 24.1 MB
  266. 2. Thread Context.ts 20.1 MB
  267. 3. Sections & Views.ts 29.6 MB
  268. 4. Asynchronous Procedure Calls.ts 22.3 MB
  269. 5. EarlyBird.ts 36.1 MB
  270. Assignment.txt 361 bytes
  271. 1. Reflective Injection Explained.ts 5.7 MB
  272. 2. ReflectiveLoader source review.ts 97.0 MB
  273. 3. Implanting RDI in source code.ts 109.4 MB
  274. 4. Shellcode RDI.ts 70.4 MB
  275. Assignment.txt 278 bytes
  276. 1. WoW64 and Heaven's Gate.ts 59.0 MB
  277. 2. Migrating between 32-bit & 64-bit processes.ts 75.7 MB
  278. 1. API Hooking intro.ts 21.3 MB
  279. 2. Hooking with Detours.ts 96.5 MB
  280. 3. IAT hooks.ts 37.8 MB
  281. 4. In-line patching.ts 60.9 MB
  282. Assignment.txt 46 bytes
  283. MultiPayload Control.ts 24.2 MB
  284. 1. Project Design.ts 8.0 MB
  285. 2. VCsniff.ts 165.8 MB
  286. 3. VCmigrate.ts 122.0 MB
  287. 4. VCpersist.ts 30.1 MB
  288. Assignment1.txt 331 bytes
  289. Assignment2.txt 247 bytes
  290. Assignment3.txt 161 bytes
  291. 27. Closing words.mp4 8.2 MB

Discussion