Introduction Windows Malware Development

0x12 Dark Development

This course teaches advanced Windows malware development in a clear and practical way. You will learn how malware is created for Windows systems and how it works. It is useful for red teamers, malware developers, and anyone interested in cybersecurity. You will learn how to understand, build, and defend against malicious software. All examples and projects are written in C++.

Note: This course is intended for ethical purposes and aims to equip individuals with the skills needed to counteract malicious activities. It is essential to use this knowledge responsibly and within legal and ethical boundaries.

Send a email for crypto payments: s12deff@gmail.com

Target audiences

Red Teamers
Programmers

Requirements

Basic C/C++ Programming Knowledge

Curriculum

27 Sections
67 Lessons
Lifetime

Expand all sectionsCollapse all sections

Introduction
3
- 1.1
  Introduction
- 1.2
  Setup
- 1.3
  Visual Studio Setup
Theory
6
- 2.1
  Processes
- 2.2
  Threads
- 2.3
  UserLand vs KernelLand
- 2.4
  PE Structure
- 2.5
  Windows API Families
- 2.6
  What AV & EDR Solutions Detect in Offensive Operations
Shellcode Generator
4
- 3.1
  Shellcode Introduction
- 3.2
  Generating malicious payloads with MSFVenom
- 3.3
  Generating shellcode with Donut
- 3.4
  Stardust
Shellcode Execution
3
- 4.2
  Classic Shellcode Execution
- 4.3
  Enum Functions to Execute Shellcode
- 4.4
  Shellcode Execution via Timer
Shellcode Encryption
2
- 5.1
  XOR
- 5.2
  AES
Process Injection
6
- 6.1
  Classic Process Injection
- 6.2
  Asynchronous Procedure Call Injection
- 6.3
  Thread Hijacking Injection
- 6.4
  Shared Section Memory Injection
- 6.5
  FindWindow Injection
- 6.6
  Process Hypnosis
DLL Injection
2
- 7.1
  DLL Injection
- 7.2
  Persistent DLL Injection
Inter Process Communication
4
- 8.1
  IPC Introduction
- 8.2
  Mutex
- 8.3
  Pipe
- 8.4
  Registry
Downloader
1
- 9.1
  Downloader Malware
Multiplatform
1
- 10.1
  Multiplatform Malware
Malware as Service
1
- 11.1
  Malware as Service
Persistence
5
- 12.1
  Persistence Introduction
- 12.2
  Perisistence via Run Registry Key
- 12.3
  Persistence via RunOnce Registry Key
- 12.4
  Persistence via Startup Directory
- 12.5
  Persistence via Application Event
Import Address Table & String Encryption
3
- 13.1
  Bypass Import Address Table
- 13.2
  Compile-Time XOR String Encryption
- 13.3
  API Hashing
Sandbox and Virtual Machines
1
- 14.1
  Bypass Sandbox and Virtual Machines
Anti Debugging
1
- 15.1
  Antidebugging Classic Techniques
Microsoft Signatures
1
- 16.1
  Steal valid Microsoft Signatures
Reverse Shell
1
- 17.1
  Reverse Shell with C++
Keylogger
1
- 18.1
  Keylogger
Windows Defender Killer
1
- 19.1
  Windows Defender Killer
Privilege Escalation
5
- 20.1
  Privilege Escalation Intro
- 20.2
  Escalate Privileges via FodHelper.exe
- 20.3
  Escalate Privileges via Token Manipulation
- 20.4
  User Acess Control Bypass using CMSTP
- 20.5
  Privilege Escalatation Class Final Project
API Hooking
3
- 21.1
  API Hooking Setup
- 21.2
  API Hooking Explaination
- 21.3
  RDP Credential Stealer
Parent PID Spoofing
1
- 22.1
  PPID Spoofing
Process Token
3
- 23.1
  Process Token Introduction
- 23.2
  Token Theft
- 23.3
  Process Token Impersonation
Dump Lsass.exe
1
- 24.1
  Dump lsass.exe
Malicious Office Documents
3
- 25.1
  Malicious Office Macros
- 25.2
  Shellcode Injection in Office Macros
- 25.3
  Configuring metasploit for VBA
Botnet Infrastructure
3
- 26.1
  Botnet Final Project Introduction
- 26.2
  Botnet Server Side
- 26.3
  Botnet Victim Side
Conclusions
1
- 27.1
  Conclusions

Instructor

s12offsec

437 Students

5 Courses

Featured Review

I recently had the privilege of enrolling in the “Malware Development Introduction for Windows” course, and I must say it was nothing short of phenomenal! As a web developer and aspiring red teamer, I was intrigued by the prospect of understanding the other side of cybersecurity, and this course delivered beyond my expectations.

$20.00

Student:

303 Students

Lesson:

67 Lessons

Duration: Lifetime

Quiz:

0 Quizzes

Level: All levels