首页

投稿

红队操作 | 高级恶意软件开发

1854

0

2025-12-18 22:12:00

转载于：https://youtube.com/ 来源于网络收集，仅供学习使用。 === 课程仅用于研究网络安全技术使用，请勿用于违法用途。

0x00实验室发消息

人无名方能潜心练剑。

1. Course Introduction

01:48

2. Development VM Setup

02:11

3. Setting up VM's Debug Mode

02:38

4. Problems with VM's Debug Mode

05:40

1. User vs Kernel Mode vs DKOM

06:33

2. 3rd-party Driver Interface - Wrapper Layer

04:08

3. 3rd-party Driver Interface - Driver Layer

03:59

4. EPROCESS Object - Introduction

02:10

5. EPROCESS Object - Windbg Experiments

11:53

6. EPROCESS Object - Implementation

11:19

1. Handles - Introduction

02:53

2. Handles - Handle Table

09:08

3. Handles - Multi-layer Handle Tables

11:08

4. Handles - Weaponization

05:53

5. Tokens - Borrowing

05:48

6. Tokens - Privileges

03:34

7. Tokens - Integrity Levels

09:18

8. Tokens - Unrestricted Object

04:32

9. Processes - Protection

08:51

1. ETW - Locating providers with DbgData

17:55

2. ETW - Locating providers with Thread-Intel

08:22

3. Driver Callbacks - Introduction

06:00

4. Driver Callbacks - Implementation

12:08

5. Object Callbacks - Introduction

09:15

6. Object Callbacks - Implemenation

04:58

7. Registry Callbacks

07:15

1. Virtual-to-Physical Address Translation

05:40

2. V2P Experiments with Windbg

11:10

3. Physical Memory - GDriver

12:16

4. Physical Memory - Intel Driver

08:43

1. Preserver Mode

15:35

2. Driver Blacklists

05:51

3. Finding Vulnerable Drivers

03:46

4. Extracting Kernel Offsets

06:58

Closing words

01:23

顶部