Encoding and Encryption

Encoding and Encryption

Preview unavailable

You must log in or sign up to view this lesson.

LoginSign up

RTO: Malware Development Essentials

Buy nowLearn more

Intro and Setup

  • Introduction
  • Development VM Setup
  • RTO-Win10.ova
  • RTO-maldev.zip
  • RTO-maldev-encrypted.zip
  • Shellcodes

Portable Executable

  • PE files - format and structure
  • PE Bear - looking inside
  • Generating EXE vs DLL
  • PE compilation

Droppers

  • Storing payloads in code section
  • Data section as a container
  • Payloads in resource section
  • Where to store payloads?

Obfuscation and Hiding

  • Payload encoding
  • Encrypting payloads - XOR
  • Encrypting payloads - AES
  • Antivirus vs call obfuscation
  • Implementing function call obfuscation
  • Encoding and Encryption

Backdoors and Trojans

  • Backdooring PE theory
  • Making Putty a trojan

Code Injection

  • Injecting code into remote process
  • Implementing code injection
  • Loading DLLs into remote process
  • DLL generator and injector
  • What is code injection?

Extras

  • Making program invisible

Combined Project

  • Dropper implementation
  • Bypassing Windows Defender
  • Assignment
  • Dropper overview

Summary

  • Your Feedback
  • Course closing information