This course is all about getting hands-on with the the inner workings of advanced malware, specifically Remote Access Trojans, or RATs. You’ll learn how they’re built, how they work behind the scenes, and how they avoid detection.
We’ll start with the basics: what makes up a RAT, how they’re structured, and examples from the real world. Then we’ll dive into building your own, step by step. You’ll implement features like process listing, file hiding, keylogging, and remote desktop stealing. You’ll also explore advanced evasion techniques like NTDLL unhooking, time stomping, and rootkit behavior.
Each lesson mixes theory with code so you understand both the “why” and the “how.” You’ll build working proof-of-concepts along the way and finish the course with a solid grasp of how real-world malware operates and how defenders can spot it.
Whether you’re into red teaming, malware research, or just curious about the mechanics of stealthy software, this course will give you the tools and insight to level up your skills.
We accept PayPal, Credit Card and Cryptocurrency, for this last option send a email to s12deff@gmail.com
RAT GitHub Repository
https://github.com/s12cybersecurity/lokirat
The course is focused on malware development. While the repository includes a web dashboard (LokiWebViewer) built with Angular, web development fundamentals are not covered, as this is part of a Malware Development Academy. The web interface is provided for completeness, not as a teaching topic.
Target audiences
- Malware Developers
- Cybersecurity Enthusiasts
- Red Teamers
- Blue Teamers
Requirements
- C++
- Basic Malware Knowndelge
Curriculum
- 4 Sections
- 31 Lessons
- Lifetime
- Introduction2
- Theoretical Foundations9
- Core Features Development19
- 3.1TimeStomping Techniques
- 3.2Process Listing and Interaction
- 3.3File Hiding with ADS
- 3.4Executing EXEs as Administrator
- 3.5Antivirus Hook Evasion Unhooking NTDLL Using Perun Farts
- 3.6Antivirus Hook Evasion Using Fresh NTDLL Copy
- 3.7File Exfiltrator
- 3.8Command Line Spoofing
- 3.9File Explorer
- 3.10Keylogger Integration
- 3.11Remote Desktop Protocol Stealer
- 3.12Rootkit Hide Files
- 3.13Rootkit Hide Processes
- 3.14Rootkit Hide Registries
- 3.15System Enumeration
- 3.16ETW Patching Techniques
- 3.17Task Scheduler
- 3.18Security Product Detection
- 3.19Mapping Free Handles in Memory
- Summary and Next Steps1
FAQs
Instructor
This course was a game-changer for me. It breaks down complex malware concepts into clear, hands-on lessons. I built my own fully functional RAT while learning real evasion tactics like NTDLL unhooking and rootkit behavior. Perfect for anyone serious about red teaming or malware dev.
This course was a game-changer for me. It breaks down complex malware concepts into clear, hands-on lessons. I built my own fully functional RAT while learning real evasion tactics like NTDLL unhooking and rootkit behavior. Perfect for anyone serious about red teaming or malware dev.