README.md

Pure Malware Development

A Collection of Pure Malware Development Resources.

Insight

• Courses & Trainings
• YouTube Materials
• Materials - Online Reads
  • Series
• Malware Samples
• Malware Source Code
• Notes- How to
• Forums

Courses & Trainings

• MalDev Acadamy - https://maldevacademy.com/
• Sektor7 - RED TEAM Operator: Malware Development Essentials Course: https://institute.sektor7.net/red-team-operator-malware-development-essentials
• Sektor7 - RED TEAM Operator: Malware Development Intermediate Course: https://institute.sektor7.net/rto-maldev-intermediate
• Sektor7 - RED TEAM Operator: Malware Development Advanced - Vol.1: https://institute.sektor7.net/rto-maldev-adv1
• Sektor7 - RED TEAM Operator: Malware Development Advanced - Vol.2: https://institute.sektor7.net/rto-maldev-adv2
• Zero-Point Security - C2 Development in C#: https://training.zeropointsecurity.co.uk/courses/c2-development-in-csharp
• Udemy - Malware Development Course 2023: From Zero to Hero: https://www.udemy.com/course/malware-development-beginner-level/
• Udemy - Practical Linux Malware Development: https://www.udemy.com/course/practical-linux-malware-development/
• Malware on Steroids by Dark Vortex: https://0xdarkvortex.dev/training-programs/malware-on-steroids/
• Windows Kernel Rootkits: https://www.codemachine.com/trainings/kerrkt.html

YouTube

• Malware Evasion Techniques: API Unhooking: https://www.youtube.com/@sonianuj
• I Created Malware With Python: i created malware with Python (it's SCARY easy!!)
• Malware Development (series): https://www.youtube.com/@crr0ww
• Cosmodium CyberSecurity: https://www.youtube.com/playlist?list=PL_dk67mLCSFHa5jDNvEuXuoafMHmTjn32
• I Became a Malware Developer: https://www.youtube.com/watch?v=LuUhox_C5yg&list=PL1jK3K11NINhvnr7Y3iGu8eLKec72Sl7D
• Malware Development in C | Getting familiar with sockets: Malware Development in C | Getting familiar with sockets
• Malware 101 Series: https://www.youtube.com/watch?v=s0suCUwwikA&list=PLXlzLNcZf2-8RnKqZIYYetIuG7rnUmYz-

Materials - Online Reads

• Malware Development Tricks: https://cocomelonc.github.io/malware/2023/01/04/malware-tricks-26.html
• Maelstrom Series: https://pre.empt.blog/
• Writing Custom Backdoor Payloads With C#: https://github.com/mvelazc0/defcon27_csharp_workshop
• Creating a Rootkit to Learn C: https://h0mbre.github.io/Learn-C-By-Creating-A-Rootkit/#
• Malware Development (Basics): https://github.com/cr-0w/maldev/tree/main
• Creating a Rootkit to Learn C: https://h0mbre.github.io/Learn-C-By-Creating-A-Rootkit/#
• String Obfuscation The Malware Way: https://dr4k0nia.github.io/posts/String-Obfuscation-The-Malware-Way/
• The Art of Malware-Bringing the Dead back to life: https://0x00sec.org/t/the-art-of-malware-bringing-the-dead-back-to-life/19599
• Analyzing Malware By API Calls: https://www.malwarebytes.com/blog/news/2017/10/analyzing-malware-by-api-calls
• Malware Dev (8 articles): https://captmeelo.com/category/maldev
• Writing a Packer: https://dr4k0nia.github.io/posts/Writing-a-Packer/
• My First Malware Dev Project: https://malwarexhunt.medium.com/my-first-malware-development-project-in-c-c-logger-stealer-c-c-75b9a0be0540
• Malware Development 101-From Zero to Non Hero [BSides-2024]: https://github.com/lsecqt/BSides-2024-Malware-Development-101-From-Zero-to-Non-Hero/raw/refs/heads/main/Malware%20Development%20101.pptx
• So You Want to Write Malware?: https://bible.malcore.io/readme/the-beginning/introduction-to-malware

Series

• Malware Development – Welcome to the Dark Side (4 parts)

  • Welcome to the Dark Side (part-1): https://niiconsulting.com/checkmate/2018/02/malware-development-welcome-dark-side-part-1/
  • Welcome to the Dark Side (part-2-1): https://niiconsulting.com/checkmate/2018/02/malware-development-welcome-dark-side-part-2-1/
  • Welcome to the Dark Side (part-2-2): https://niiconsulting.com/checkmate/2018/03/malware-development-welcome-dark-side-part-2-2/
  • Welcome to the Dark Side (part-3): https://niiconsulting.com/checkmate/2018/03/malware-development-welcome-dark-side-part-3/
  • Welcome to the Dark Side (part-4): https://niiconsulting.com/checkmate/2018/03/malware-development-welcome-to-the-dark-side-part-4/
  • Malware Development – works: https://github.com/paranoidninja/Botnet-blogpost/

• Malware development part 1 - (9 parts)

  • Basics (part 1): https://0xpat.github.io/Malware_development_part_1/
  • Anti Dynamic Analysis & sandboxes (part 2): https://0xpat.github.io/Malware_development_part_2/
  • Anti-Debugging (part 3): https://0xpat.github.io/Malware_development_part_3/
  • Anti Static Analysis Tricks (part 4): https://0xpat.github.io/Malware_development_part_4/
  • Tips & Tricks (part 5): https://0xpat.github.io/Malware_development_part_5/
  • Advanced Obfuscation with LLVM and Template Metaprogramming (part 6): https://0xpat.github.io/Malware_development_part_6/
  • Secure Desktop Keylogger (part 7): https://0xpat.github.io/Malware_development_part_7/
  • COFF Injection and In-memory Execution (part 8): https://0xpat.github.io/Malware_development_part_8/
  • Hosting CLR and Managed Code Injection (part 9): https://0xpat.github.io/Malware_development_part_9/

• Malware Development (8 parts)

  • Malware Development - Part 1: https://sid4hack.medium.com/malware-development-part-1-ea9e26088662
  • Malware Development - Part 2: https://sid4hack.medium.com/malware-development-part-2-459109c50126
  • Malware Development - Part 3: https://sid4hack.medium.com/malware-development-part-3-669bebef79c4
  • Malware Development - Part 4: https://sid4hack.medium.com/malware-development-part-4-9fa5e817ed96
  • Malware Development - Part 5: DLL injection into the process: https://sid4hack.medium.com/malware-development-part-5-dll-injection-into-the-process-bc7f8b63b45b
  • Malware Development - Part 6: DLL hijacking: https://sid4hack.medium.com/malware-development-part-6-dll-hijacking-70bd4611a105
  • Malware Development - Part 7: Advanced Code Injection: https://sid4hack.medium.com/malware-development-7-advanced-code-injection-9343e7e92bd9
  • Malware Development - Part 8: Reverse Shell Via Dll Hijacking: https://sid4hack.medium.com/malware-development-part-8-reverse-shell-via-dll-hijacking-ce48f5ebbafe

Malware Samples

• VX Underground: https://vx-underground.org/Samples
• MalwareBazaar: https://bazaar.abuse.ch/browse/
• VirusTotal: https://www.virustotal.com/gui/home/search
• MalShare: https://malshare.com/
• Tekdefence: http://www.tekdefense.com/downloads/malware-samples/
• InQuest: https://github.com/InQuest/malware-samples
• Malware-Feed: https://github.com/MalwareSamples/Malware-Feed/

Malware Source Code

• VX Underground: https://github.com/vxunderground/MalwareSourceCode
• Malware Source Code: https://github.com/topics/malware-source-code
• The Zoo: https://github.com/ytisf/theZoo / https://github.com/ytisf/theZoo/tree/master/malwares/Source/Original

Notes- How to

• If you want to get good at Malware Development: https://0x00sec.org/t/if-you-want-to-get-good-at-malware-development/23466
• How do you get into Malware Development: https://www.quora.com/How-do-you-get-into-malware-development
• How to get into Malware Development: https://makosecblog.com/malware-dev/malware-development-intro/
• Awesome Malware Development: https://github.com/rootkit-io/awesome-malware-development

Forums

• Malwaretips: https://malwaretips.com/
• 0x00sec: https://0x00sec.org/
• Kernelmode: https://www.kernelmode.info/forum/
• Hackforums: https://hackforums.net/forumdisplay.php
• Breachforums: https://breachforums.is/Forum-Malware-Development
• Cyberarsenal: https://cyberarsenal.org/forums/malware-dev.68/

/* will keep it updated.. */