علیرضا کلانترزاده

کاوه رسولی

• پیشرفته
• مسیر قرمز
• ۷ درس

دربارۀ این دوره

مخاطبان

• متخصصان و علاقه‌مندان به امنیت اطلاعات، تست نفوذ و Red Team
• تحلیلگران بدافزار (Malware Analysts) و اعضای تیم‌های دفاعی (Blue Team و SOC)

پیش‌نیازها

• آشنایی با برنامه‌نویسی و مفاهیم سیستم‌عامل و ویندوز
• آشنایی با زبان C و Python

• Intro
  • Course Overview and Objectives
  • Understanding Ethical Malware Development
• Lab Environment
  • Setting Up a Safe Development
  • Required Tools
• Programming and Internals
  • Introduction to C
  • Working with Memory in C
  • Assembly Fundamentals
  • Stack Structure : Call Stack, Stack Frames
  • Python in Malware Development
  • Inline Assembly
  • Assembly in Python
  • Windows Architecture
  • Processes, Threads, and Memory Management
  • Interacting with System Resources
  • Working with Windows API's
• Shellcoding From Zero
  • Shellcode Structure
  • Writing Position-Independent Shellcode
  • Encoding and Encrypting Shellcode
• Injection Techniques
  • CreateRemoteThread
  • NtCreateThreadEx
  • Hijack Threads
  • QueueUserAPC
  • DLL Injection
  • Reflective DLL Loading
  • PE Injection
  • Process Hollowing
  • Hooking
  • InDirect & Direct Syscalls
• Post Exploitions
  • Playing with LSASS
  • Registry-Based Persistence
  • Windows Services and Scheduled Task Persistence
  • DLL hijacks
  • DLL proxies
  • COM object hijacks
  • Long-Term Persistence
  • Token Stealing
  • UAC Bypass Techniques
• Evasion
  • AV & EDR Internals
  • Static Analysis Evasion
  • Dynamic Analysis Evasion
  • Bypassing Sandboxes
  • In-Memory Execution and Fileless Malware Techniques
  • Deal with kernel drivers
  • Find kernel offsets and vulnerable drivers
  • Bypass ETW from kernel
  • Playing with kernel callbacks

گواهینامه‌ی دوره