Pure Malware Development

A Collection of Pure Malware Development Resources.

Insight

• Courses & Trainings
• YouTube Materials
• Online Reads
  • Series
• Malware Samples
• Malware Source Code
• Notes- How to
• Forums

Courses & Trainings:

• MalDev Acadamy - https://maldevacademy.com/
• Sektor7 - RED TEAM Operator: Malware Development Essentials Course: https://institute.sektor7.net/red-team-operator-malware-development-essentials
• Sektor7 - RED TEAM Operator: Malware Development Intermediate Course: https://institute.sektor7.net/rto-maldev-intermediate
• Sektor7 - RED TEAM Operator: Malware Development Advanced - Vol.1: https://institute.sektor7.net/rto-maldev-adv1
• Zero-Point Security - C2 Development in C#: https://training.zeropointsecurity.co.uk/courses/c2-development-in-csharp
• Udemy - Malware Development Course 2023: From Zero to Hero: https://www.udemy.com/course/malware-development-beginner-level/
• Udemy - Practical Linux Malware Development: https://www.udemy.com/course/practical-linux-malware-development/
• Malware on Steroids by Dark Vortex: https://0xdarkvortex.dev/training-programs/malware-on-steroids/
• Windows Kernel Rootkits: https://www.codemachine.com/trainings/kerrkt.html

YouTube:

• Malware Evasion Techniques: API Unhooking: https://www.youtube.com/@sonianuj
• I created malware with Python: i created malware with Python (it's SCARY easy!!)
• Malware Development (series): https://www.youtube.com/@crr0ww
• Cosmodium CyberSecurity: https://www.youtube.com/playlist?list=PL_dk67mLCSFHa5jDNvEuXuoafMHmTjn32
• I Became a Malware Developer: https://www.youtube.com/watch?v=LuUhox_C5yg&list=PL1jK3K11NINhvnr7Y3iGu8eLKec72Sl7D
• Malware Development in C | Getting familiar with sockets: Malware Development in C | Getting familiar with sockets

Materials - Online Reads:

• Malware development tricks: https://cocomelonc.github.io/malware/2023/01/04/malware-tricks-26.html
• Maelstrom series: https://pre.empt.blog/
• Writing custom backdoor payloads with C#: https://github.com/mvelazc0/defcon27_csharp_workshop
• Creating a Rootkit to Learn C: https://h0mbre.github.io/Learn-C-By-Creating-A-Rootkit/#
• Maelstrom series: https://pre.empt.blog/
• Malware Development (Basics): https://github.com/cr-0w/maldev/tree/main
• Writing custom backdoor payloads with C#: https://github.com/mvelazc0/defcon27_csharp_workshop
• Creating a Rootkit to Learn C: https://h0mbre.github.io/Learn-C-By-Creating-A-Rootkit/#
• String Obfuscation The Malware Way: https://dr4k0nia.github.io/posts/String-Obfuscation-The-Malware-Way/
• The Art of Malware-Bringing the Dead back to life: https://0x00sec.org/t/the-art-of-malware-bringing-the-dead-back-to-life/19599
• Analyzing malware by API calls: https://www.malwarebytes.com/blog/news/2017/10/analyzing-malware-by-api-calls
• Malware Dev (8 articles): https://captmeelo.com/category/maldev
• Writing a Packer: https://dr4k0nia.github.io/posts/Writing-a-Packer/
• My First Malware Dev Project: https://malwarexhunt.medium.com/my-first-malware-development-project-in-c-c-logger-stealer-c-c-75b9a0be0540
• Huge Github Search: https://github.com/topics/malware-development

Series

• Malware Development – Welcome to the Dark Side (4 parts):

  • Welcome to the Dark Side (part-1): https://niiconsulting.com/checkmate/2018/02/malware-development-welcome-dark-side-part-1/
  • Welcome to the Dark Side (part-2-1): https://niiconsulting.com/checkmate/2018/02/malware-development-welcome-dark-side-part-2-1/
  • Welcome to the Dark Side (part-2-2): https://niiconsulting.com/checkmate/2018/03/malware-development-welcome-dark-side-part-2-2/
  • Welcome to the Dark Side (part-3): https://niiconsulting.com/checkmate/2018/03/malware-development-welcome-dark-side-part-3/
  • Welcome to the Dark Side (part-4): https://niiconsulting.com/checkmate/2018/03/malware-development-welcome-to-the-dark-side-part-4/
  • Malware Development – works: https://github.com/paranoidninja/Botnet-blogpost/

• Malware development part 1 - (9 parts):

  • Basics (part 1): https://0xpat.github.io/Malware_development_part_1/
  • Anti dynamic analysis & sandboxes (part 2): https://0xpat.github.io/Malware_development_part_2/
  • Anti-debugging (part 3): https://0xpat.github.io/Malware_development_part_3/
  • Anti static analysis tricks (part 4): https://0xpat.github.io/Malware_development_part_4/
  • Tips & tricks (part 5): https://0xpat.github.io/Malware_development_part_5/
  • Advanced obfuscation with LLVM and template metaprogramming (part 6): https://0xpat.github.io/Malware_development_part_6/
  • Secure Desktop keylogger (part 7): https://0xpat.github.io/Malware_development_part_7/
  • COFF injection and in-memory execution (part 8): https://0xpat.github.io/Malware_development_part_8/
  • Hosting CLR and managed code injection (part 9): https://0xpat.github.io/Malware_development_part_9/

Malware Samples:

• VX Underground
• MalwareBazaar
• VirusTotal
• MalShare
• Tekdefence
• InQuest
• Malware-Feed

Malware Source Code:

• VX Underground: https://github.com/vxunderground/MalwareSourceCode
• Malware Source Code: https://github.com/topics/malware-source-code
• The Zoo: https://github.com/ytisf/theZoo / https://github.com/ytisf/theZoo/tree/master/malwares/Source/Original

Notes- How to:

• If you Want to get good at Malware Development: https://0x00sec.org/t/if-you-want-to-get-good-at-malware-development/23466
• How do you get into malware development: https://www.quora.com/How-do-you-get-into-malware-development
• How to get into malware development: https://makosecblog.com/malware-dev/malware-development-intro/
• Awesome Malware Development: https://github.com/rootkit-io/awesome-malware-development

Forums:

• Malwaretips: https://malwaretips.com/
• 0x00sec: https://0x00sec.org/
• Kernelmode: https://www.kernelmode.info/forum/
• Hackforums: https://hackforums.net/forumdisplay.php
• Breachforums: https://breachforums.is/Forum-Malware-Development
• Cyberarsenal: https://cyberarsenal.org/forums/malware-dev.68/

/* will keep it updated.. */