Fundamentals of Linux Implant Development

Topic outline

• 

  General

  • This is Under Construction Page

    Hey! I'm in the process of building out this course and I have no idea what I am doing. Appreciate any feedback you have! Hit me at d.m.devey@gmail.com with comments, questions, or concerns.

    Thank you!

    -Dennis

• 

  Introduction

  • Course Description Page
  • Disclaimer Page
  • How APT? Page
  • Counterpoint: No Page
  • Let's Try: Advanced Page
  • Let's Try: Persistent Page
  • Let's Try: Threat Page
  • End of Chapter Survey Feedback
• 

  Hopping Roppers

  • Letter from the Author Page
  • The Site Page
  • Legal Stuff Page
  • Join Us Page
  • End of Chapter Survey Feedback
• 

  Prior Art

  • References Page
  • cd00r Assignment
  • sad00r Assignment
  • Turla Page
  • Running cd00r Assignment
  • Adding Functionality Assignment
  • End of Chapter Survey Feedback
• 

  DevOps

  • Better Practices Page
  • Intro to sniffex Assignment
  • Sniffex to Portknocker Assignment
  • Generation Assignment
  • Pythonic Assignment
  • Documentation Assignment
  • End of Chapter Survey Feedback
• 

  sniffex.c and Portability

  • Architecture Portability Assignment
  • Library Portability Assignment
  • Static Portability Assignment
  • Stripped Static Assignment
  • Dynamic Portability Assignment
  • Complexity Page
  • End of Chapter Survey Feedback
• 

  Antivirus Theory

  • Detection at Scale Page
  • Signature Theory Page
  • Heuristic Theory Page
  • Sandbox Theory and Behavioral Detection Page
  • Filesystem Anomaly Finders Page
  • End of Chapter Survey Feedback
• 

  Basics

  • Execution Guardrails and Validators Assignment
  • Encoding/Encryption Assignment
  • Dummy Payload Assignment
  • Add State Assignment
  • More Knocks Assignment
  • Print Knocks Assignment
  • Multiple Knocks Assignment
  • End of Chapter Survey Feedback
  • Operation Resources Page
• 

  Customization

  • Turla's Modern Penguin Page
  • Download and Execute Assignment
  • Privilege Escalation Assignment
  • Persistence Assignment
  • Mutex Assignment
  • Uninstall Assignment
  • End of Chapter Survey Feedback
• 

  Advanced Payloads

  • Bind Shell Assignment
  • Activation and Connecting to Shells Assignment
  • Reverse Shell Assignment
  • Raining Shells with MSF RPC Assignment
  • Feedback Survey
  • Shellcode Execution Assignment
  • Shellcode Shells Assignment
  • MSFvenom Assignment
  • Feedback Survey
• 

  Anti-Forensics and Anti-Analysis

  • Grugq "Art of Defiling" Assignment
  • Basic Forensics Assignment
  • Memory Forensics Assignment
  • Uninstall Part 2 Assignment
  • Anti-Debugging Assignment
  • Anti-Disassembly Assignment
  • Anti-Virtualization Assignment
  • Anti-Antivirus Assignment
• 

  Obfuscation (In Progress)

  • Shellcode Obfuscation and MSFvenom Assignment

    This entire section is in-process, looking for good resources and activities.

    Windows stuff is easy, Linux has a lot less information on the subject.

    If you want to help, submit good resources and activities.

  • Packers Assignment
  • Crypters Assignment
  • Protectors Assignment
  • Binders Assignment
  • Complexity under the RE Microscope Assignment
  • End of Chapter Survey Feedback
• 

  Command and Control

  • C2 Theory Page
  • Listening Post Assignment
  • Command Line Interface Assignment
  • Pre-Defined C2 Assignment
  • Encrypt your C2 Assignment
  • End of Chapter Survey Feedback
• 

  Rootkit

  • Rootkit Theory Page
  • Turn Your Implant Into a LD_Preload Rootkit Assignment
  • Detect Your LD_Preload Rootkit Assignment
  • End of Chapter Survey Feedback
• 

  Injection

  • Shellcode Injection Assignment
  • End of Chapter Survey Feedback
• 

  Reverse Engineering