Malicious Software Research

This is a repository dedicated to researching, documenting, developing,
and ultimately, defending against various strains of malicious software.

Environment (Requires Docker)

git clone https://github.com/0xvpr/Malicious-Software-Research
cd Malicious-Software-Research
chmod +x build-image.sh run-image.sh
./build-image.sh
./run-image.sh

Navigation

Code Examples 01. Storage Techniques 02. Injection Techniques 03. Obfuscation Techniques 04. Evasion 05. Ransomware 06. Living Off The Land 07. Socket 08. Keyloggers 09. Droppers 10. Hooking Techniques

Learning Resources

Code Examples

1. Storage Techniques

• Data
• Text
• Rsc

2. Injection Techniques

• Crt

3. Obfuscation Techniques

• Aes
• Xor
• Simple Template Metaprogramming
• Intermediate Template Metaprogramming

4. Evasion

• Anti Dynamic Analysis Techniques

5. Ransomware

• Simple Recursive Encryptor

6. Living Off The Land
7. Socket

• Linux Server
• Python C2 Server

8. Keyloggers

• Simple Keylogger

9. Droppers

• Simple Dropper
• Intermediate Dropper

10. Hooking Techniques

• Absolute Jmp Detour
• Absolute Jmp Detour Once
• Relative Jmp Detour

Learning Resources

• Reversing C++ Classes and Structures
  • Paul Vincent Sabanal & Mark Vincent Yason
• Reflective DLL Injection
  • MSF Explanation
• Executing Position Independent Shellcode from Object Files in Memory
  • Dark VortEx
• Shellcode Crafting
  • fb1h2s
• Getting Familiar with Sockets
  • ActiveXSploit
• Anti Dynamic Analysis & Sandboxes
  • 0xPat
• Anti Debugging
  • 0xPat
• Anti Static Analysis Tricks
  • 0xPat