Become an APT: Write Your Own Linux Implant

Topic outline

• 

  General

  • This is Under Construction Page

    Hey! I'm in the process of building out this course on writing Linux implants and would appreciate any feedback you have! Hit me at d.m.devey@gmail.com with comments, questions, or concerns.

    Thank you!

    -Dennis

  • Site Registration Page

    Restricted Not available unless: The activity Course Description is incomplete

    You must register for the site before your progress can be tracked.

    Click here to register: https://academy.hoppersroppers.org/login/signup.php?

  • Join our Chat Room Page

    Join our Slack at https://join.slack.com/t/hoppersroppers/shared_invite/zt-d66799ci-tZStzuZ5Nb0Coz5O6huKTA

    The channel for this Become an APT course is #hoppingroppers. Use that channel for any questions you have.

• 

  Introduction

  • Course Description Page
  • Disclaimer Page
  • How APT? Page
  • Counterpoint: No Page
  • Let's Try: Advanced Page
  • Let's Try: Persistent Page
  • Let's Try: Threat Page
  • End of Chapter Survey Feedback
• 

  Hopping Roppers

  • Letter from the Author Page
  • Our Name Page
  • The Site Page
  • Legal Stuff Page
  • Join Us Page
  • End of Chapter Survey Feedback
• 

  Prior Art

  • cd00r Assignment
  • sad00r Assignment
  • Turla Page
  • Running cd00r Assignment
  • Adding Functionality Assignment
  • End of Chapter Survey Feedback
• 

  DevOps

  • Better Practices Page
  • Intro to sniffex Assignment
  • Sniffex to Portknocker Assignment
  • Generation Assignment
  • Pythonic Assignment
  • End of Chapter Survey Feedback
• 

  sniffex.c and Portability

  • Architecture Portability Assignment
  • Library Portability Assignment
  • Static Portability Assignment
  • Stripped Static Assignment
  • Dynamic Portability Assignment
  • Complexity Page
  • End of Chapter Survey Feedback
• 

  Antivirus Theory

  • Detection at Scale Page
  • Signature Theory Page
  • Heuristic Theory Page
  • Sandbox Theory and Behavioral Detection Page
  • Anomaly Finders Page
  • End of Chapter Survey Feedback
• 

  Basics

  • Execution Guardrails Assignment
  • Encoding/Encryption Assignment
  • Dummy Payload Assignment
  • Add State Assignment
  • More Knocks Assignment
  • Print Knocks Assignment
  • Multiple Knocks Assignment
  • End of Chapter Survey Feedback
• 

  Customization

  • Turla's Modern Penguin Page
  • Download and Execute Assignment
  • Privilege Escalation Assignment
  • Persistence Assignment
  • Mutex Assignment
  • End of Chapter Survey Feedback
• 

  Advanced Payloads

  • Bind Shell Assignment
  • Activation and Connecting to Shells Assignment
  • Reverse Shell Assignment
  • Raining Shells with MSF RPC Assignment
  • Feedback Survey
  • Shellcode Execution Assignment
  • Shellcode Shells Assignment
  • MSFvenom Assignment
  • Feedback Survey
  • End of Chapter Survey Feedback
• 

  Obfuscation (In Progress)

  • Shellcode Obfuscation and MSFvenom Assignment

    This entire section is in-process, looking for good resources and activities.

    Windows stuff is easy, Linux has a lot less information on the subject.

    If you want to help, submit good resources and activities.

  • Packers Assignment
  • Crypters Assignment
  • Protectors Assignment
  • Binders Assignment
  • Complexity under the RE Microscope Assignment
  • End of Chapter Survey Feedback
• 

  Command and Control

  • C2 Theory Page
  • Listening Post Assignment
  • Command Line Interface Assignment
  • Pre-Defined C2 Assignment
  • Encrypt your C2 Assignment
  • End of Chapter Survey Feedback
• 

  Rootkit

  • Rootkit Theory Page
  • Turn Your Implant Into a LD_Preload Rootkit Assignment
  • Detect Your LD_Preload Rootkit Assignment
  • End of Chapter Survey Feedback
• 

  Injection

  • Shellcode Injection Assignment
  • End of Chapter Survey Feedback