Evil Penguin

علیرضا کلانترزاده

• پیشرفته
• مسیر قرمز
• ۱۰ درس

دربارۀ این دوره

مخاطبان

• کارشناسان فعال تست نفوذ
• کارشناسان فعال تیم قرمز
• کارشناسان شکار تهدیدات
• کارشناسان تیم بنفش

پیش‌نیازها

• آشنایی با سیستم‌عامل لینوکس
• آشنایی با زبان C/C++
• تجربه حداقل یک سال کار در حوزۀ امنیت سایبری

• Linux Fundamental
  • Linux History
  • Linux Distribution
  • Directory Structure
  • File & Directory Permissions
  • Users & Groups
  • Shells & Command History
  • Linux Services & Daemons Overview
• Linux Internals
  • Linux Architecture
  • ELF
  • Kernel Modules Fundamentals
  • Compile a Linux Kernel
  • Process and Thread Fundamentals
  • Essential Tools for Linux Debug
  • Memory Management
  • Process Signals and generating a signal
  • Virtual File System
  • Memory Segmentation
  • Control Groups
  • System calls
  • Calling Convention
  • Parent & child process relation in Linux
  • Process Communication
• Bash Script
  • Using bash as a dropper
  • Encryption and Encoding
  • Obfuscation
  • User list filter
  • Hostname filter for Execution
  • Set Expiration
    • Check Internet Connectivity
  • Bash Script to ELF File
• Process Injection
  • Several Ways of Shellcode Injection
  • Payload Encoding & Encryption
  • So Injection
• ELF & Anti Forensics Technique
  • ELF Corruption
  • UPX Packing
  • Encryption & Encoding
  • User, Hostname, Permission Enumeration
  • Sandbox Detection
• Python
  • Python in All Stage
  • Python to ELF
  • Execute Python Without Python
• Rootkits
  • User Mode Rootkit
  • Kernel Mode Rootkit
• Evasion
  • How Linux EDR Collect Data
  • How Bypass EDR & EPP in Linux
• C2
  • C2 Server Implementation
  • C2 Payload Implementation
• Persistence Techniques in Linux
  • Systemd Timers
  • Cron Jobs
  • Privileged User
  • Init.d & System Services
  • SSH Keys
  • Shell Settings Files
  • Persist with PAM
  • Rc.local
  • PreLoad library
  • Package Manager
  • ACL Persistence
  • Hidden Process
  • Using BPF for Persistence
  • Additional Techniques

گواهینامه‌ی دوره